PT-2024-3697 · D Link · D-Link Dar-8000 +1

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000 versions prior to the latest supported version D-Link DAR-8000 versions prior to the latest supported version Description: The issue is related to an unrestricted file upload vulnerability in the /firewall/urlblist.php file of...

PT-2024-3695 · D Link · D-Link Dar-7000-40

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C Description: A critical issue has been found in the file /useratte/resmanage.php, allowing for unrestricted upload through the manipulation of the file argument. This can be exploited remotely,...

PT-2024-3650 · D Link · D-Link Dar-7000-40 +2

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C D-Link DAR-7000 affected versions not specified D-Link DAR-8000 affected versions not specified Description: A critical issue affects the processing of the file /useratte/resmanage.php, where the...

PT-2024-3696 · D Link · D-Link Dar-7000-40 +2

Name of the Vulnerable Software and Affected Versions: D-Link DAR-7000-40 version V31R02B1413C D-Link DAR-7000 affected versions not specified D-Link DAR-8000 affected versions not specified Description: A critical issue affects an unknown part of the file /url/url.php, allowing for unrestricted...

The vulnerability of the raid1_end_write_request() function in the drivers/md/raid1.c file of the Linux operating system’s raid1 kernel driver allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the raid1endwriterequest function in the drivers/md/raid1.c file of the Linux operating system’s RAID1 kernel driver is related to incorrect handling of the bitwise mask. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...

CVE-2024-4699

UNSUPPORTED WHEN ASSIGNED A vulnerability, which was classified as critical, has been found in D-Link DAR-8000-10 up to 20230922. This issue affects some unknown processing of the file /importhtml.php. The manipulation of the argument sql leads to deserialization. The attack may be initiated...

May 14, 2024—KB5037778 (Monthly Rollup)

None None...

May 14, 2024—KB5037771 (OS Builds 22621.3593 and 22631.3593)

None None...

May 14, 2024—KB5037823 (Monthly Rollup)

None None...

May 14, 2024—KB5037803 (Security-only update)

None None...

May 14, 2024—KB5037780 (Monthly Rollup)

None None...

CVE-2024-34353 matrix-sdk-crypto contains a log exposure of private key of the server-side key backup

The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side key backup stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides ...

CVE-2024-34353 matrix-sdk-crypto contains a log exposure of private key of the server-side key backup

The matrix-sdk-crypto crate, part of the Matrix Rust SDK project, is an implementation of a Matrix end-to-end encryption state machine in Rust. In Matrix, the server-side key backup stores encrypted copies of Matrix message keys. This facilitates key sharing between a user's devices and provides ...

F5 BIG-IP Next Central Manager SQL Injection Vulnerability

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A SQL injection vulnerability exists in F5 BIG-IP Next Central Manager, which can be exploited by an attacker to send crafted...

Nextcloud: Invisible Salamanders Attack against end_to_end_encryption in Nextcloud

Vulnerability description not provided...

CVE-2024-33612

An improper certificate validation vulnerability exists in BIG-IP Next Central Manager and may allow an attacker to impersonate an Instance Provider system. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-33604

A reflected cross-site scripting XSS vulnerability exist in undisclosed page of the BIG-IP Configuration utility that allows an attacker to run JavaScript in the context of the currently logged-in user. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-28889

When an SSL profile with alert timeout is configured with a non-default value on a virtual server, undisclosed traffic along with conditions beyond the attacker's control can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical...

CVE-2024-28132

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-25560

When BIG-IP AFM is licensed and provisioned, undisclosed DNS traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...