KB5036969: Windows Server 2012 Security Update (April 2024)

The remote Windows host is missing security update 5036969. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-20688,...

CVE-2024-28920: Protection Mechanism Failure

Secure Boot Security Feature Bypass Vulnerability...

Adobe Experience Manager 6.5.0 < 6.5.20 Multiple Vulnerabilities (APSB24-21)

The version of Adobe Experience Manager installed on the remote host is prior to 6.5.20. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB24-21 advisory. - Adobe Experience Manager versions 6.5.19 and earlier are affected by a stored Cross-Site Scripting XSS...

CVE-2024-28924: Stack-based Buffer Overflow

Secure Boot Security Feature Bypass Vulnerability...

CVE-2024-26175: Out-of-bounds Read

Secure Boot Security Feature Bypass Vulnerability...

CVE-2024-20688: Stack-based Buffer Overflow

Secure Boot Security Feature Bypass Vulnerability...

WordPress Plugin Form Maker by 10Web 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-26228: Improper Verification of Cryptographic Signature

Windows Cryptographic Services Security Feature Bypass Vulnerability...

CVE-2024-29062: Time-of-check Time-of-use (TOCTOU) Race Condition

Secure Boot Security Feature Bypass Vulnerability...

KB5036960: Windows Server 2012 R2 Security Update (April 2024)

The remote Windows host is missing security update 5036960. It is, therefore, affected by multiple vulnerabilities - Microsoft WDAC SQL Server ODBC Driver Remote Code Execution Vulnerability CVE-2024-26214 - Secure Boot Security Feature Bypass Vulnerability CVE-2024-20669, CVE-2024-20688,...

CVE-2024-26189: Improper Input Validation

Secure Boot Security Feature Bypass Vulnerability...

APSB24-21 : Security update available for Adobe Experience Manager

Adobe has released updates for Adobe Experience Manager AEM. These updates resolve vulnerabilities rated important. Successful exploitation of these vulnerabilities could result in arbitrary code execution and security feature bypass...

CVE-2024-28896: Heap-based Buffer Overflow

Secure Boot Security Feature Bypass Vulnerability...

PT-2024-2865 · Totolink · Totolink Ex200

Name of the Vulnerable Software and Affected Versions: TOTOLINK EX200 version 4.0.3c.7646 B20201211 Description: The issue is related to the getWiFiExtenderConfig function, which can allow an attacker to obtain sensitive information without authorization. This can be exploited by a remote attacke...

DEBIAN-CVE-2024-26803

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...

CVE-2024-26803 net: veth: clear GRO when clearing XDP even when down

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...

CVE-2024-26803 net: veth: clear GRO when clearing XDP even when down

In the Linux kernel, the following vulnerability has been resolved: net: veth: clear GRO when clearing XDP even when down veth sets NETIFFGRO automatically when XDP is enabled, because both features use the same NAPI machinery. The logic to clear NETIFFGRO sits in vethdisablexdp which is called...

CVE-2024-29008 Apache CloudStack: The extraconfig feature can be abused to load hypervisor resources on a VM instance

A problem has been identified in the CloudStack additional VM configuration extraconfig feature which can be misused by anyone who has privilege to deploy a VM instance or configure settings of an already deployed VM instance, to configure additional VM configuration even when the feature is not...

PT-2024-20967 · Unknown · Advanced Rest Client

Name of the Vulnerable Software and Affected Versions: Advanced REST Client version 17.0.9 Description: The issue allows a remote attacker to execute arbitrary code and obtain sensitive information via a crafted script to the edit details parameter of the New Project function. This is a Cross Sit...

PT-2024-21613 · Linux +3 · Linux Kernel +3

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue concerns the userfaultfd feature in the Linux kernel, where the src folio is changed after ensuring it's unpinned in UFFDIO MOVE. A commit was made to fix an unexpected chang...