K000141090: SQLite vulnerability CVE-2020-13630

Security Advisory Description ext/fts3/fts3.c in SQLite before 3.32.0 has a use-after-free in fts3EvalNextRow, related to the snippet feature. CVE-2020-13630 Impact When this vulnerability is exploited, an attacker can cause SQLite to crash, resulting in a denial-of-service DoS, or possibly execu...

Apple watchOS 安全漏洞

Apple watchOS is a set of smartwatch operating systems from Apple USA. A security vulnerability exists in Apple watchOS version 11, which stems from the fact that an attacker with physical access to a locked device may be able to take control of a nearby device via an assistive function...

PT-2024-37770 · WordPress · Wp Hardening – Fix Your Wordpress Security

Name of the Vulnerable Software and Affected Versions: The WP Hardening – Fix Your WordPress Security plugin versions up to, and including, 1.2.6 Description: The issue is due to the use of an incorrect regular expression within the "Stop User Enumeration" feature, making it possible for...

CVE-2024-44171

CVE-2024-44171 affects Apple platforms (iOS 17.7/iPadOS 17.7, iOS 18/iPadOS 18, watchOS 11). Description and Red Hat/NVD entries indicate the issue stems from improved state management that enables an attacker with physical access to a locked device to Control Nearby Devices via accessibility fea...

PT-2024-39281

Name of the Vulnerable Software and Affected Versions: aimhubio aim versions up to 3.24 Description: A problematic issue was found in the dangerouslySetInnerHTML function of the textbox.tsx file in the Text Explorer component. The manipulation of the query argument leads to cross-site scripting. ...

CVE-2024-46680 Bluetooth: btnxpuart: Fix random crash seen while removing driver

In the Linux kernel, the following vulnerability has been resolved: Bluetooth: btnxpuart: Fix random crash seen while removing driver This fixes the random kernel crash seen while removing the driver, when running the load/unload test over multiple iterations. 1 modprobe btnxpuart 2 hciconfig hci...

PT-2024-28736 · Unknown · Vaultwarden

Name of the Vulnerable Software and Affected Versions: Vaultwarden formerly Bitwarden RS version 1.30.3 Description: A vulnerability has been identified in the authentication and authorization process of the endpoint responsible for altering the metadata of an emergency access. It permits an...

PT-2024-21821

Name of the Vulnerable Software and Affected Versions Refuel Autolabel library versions 0.0.8 and newer Description An arbitrary code execution issue exists due to the way multilabel classification tasks handle provided CSV files. If a user creates a multilabel classification task using a...

Evaluating the Effectiveness of Reward Modeling of Generative AI Systems

New research evaluating the effectiveness of reward modeling during Reinforcement Learning from Human Feedback RLHF: "SEAL: Systematic Error Analysis for Value ALignment." The paper introduces quantitative metrics for evaluating the effectiveness of modeling and aligning human values: Abstract:...

Remote Code Execution (RCE)

dtale is vulnerable to Remote Code Execution RCE. The vulnerability is due to improper handling or validation of user input in the "Custom Filter" feature using the getstrarg method, allowing malicious code to be executed on the server...

kernel: mm: cachestat: fix two shmem bugs

CVE-2024-35797 is a vulnerability in the Linux kernel’s memory management, specifically affecting the cachestat feature when handling shared memory. The flaw stems from race conditions during operations like swapping or invalidation, which can lead to out-of-bounds memory access or invalid pointe...

Microsoft Publisher 2016 Security Feature Bypass Vulnerability (KB5002566)

This host is missing an important security update according to Microsoft KB5002566 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

Microsoft Windows Security Feature Bypass And Spoofing Vulnerabilities (KB5043049)

This host is missing an important security update according to Microsoft KB5043049 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Microsoft Office 365 (2016 Click-to-Run) Multiple Vulnerabilities (Sep 2024)

This host is missing a critical security update according to Microsoft Office Click-to-Run update September 2024. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2024-38226

Microsoft Publisher Security Feature Bypass Vulnerability...

CVE-2024-38226

Microsoft Publisher Security Feature Bypass Vulnerability...

CVE-2024-38217

Windows Mark of the Web Security Feature Bypass Vulnerability...

CVE-2024-30073

Windows Security Zone Mapping Security Feature Bypass Vulnerability...

CVE-2024-43487 Windows Mark of the Web Security Feature Bypass Vulnerability

...

CVE-2024-30073

CVE-2024-30073 is a Windows Security Zone Mapping security feature bypass vulnerability. The public records show a CVSS v3.1 base score of 7.8 (High) with Local attack vector, low attack complexity, no privileges required, but user interaction required, and impact to confidentiality, integrity, a...