Slackware Linux 15.0 / current mozilla-thunderbird Vulnerability (SSA:2024-284-01)

The version of mozilla-thunderbird installed on the remote host is prior to 115.16.0esr / 128.3.1esr. It is, therefore, affected by a vulnerability as referenced in the SSA:2024-284-01 advisory. New mozilla-thunderbird packages are available for Slackware 15.0 and -current to fix security issues...

PT-2024-32915 · Delta Electronics · Cncsoft-G2

Name of the Vulnerable Software and Affected Versions: Delta Electronics CNCSoft-G2 affected versions not specified Description: The issue is related to a lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. This can be exploited by an...

BIT-KEYDB-2024-31449 Lua library commands may lead to stack overflow and RCE in Redis

Redis is an open source, in-memory database that persists on disk. An authenticated user may use a specially crafted Lua script to trigger a stack buffer overflow in the bit library, which may potentially lead to remote code execution. The problem exists in all versions of Redis with Lua scriptin...

PT-2024-6717

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Expedition affected versions not specified Description: The issue is related to an SQL injection vulnerability in Palo Alto Networks Expedition. This vulnerability allows an unauthenticated attacker to reveal Expedition...

PT-2024-9542 · Microsoft · Azure Stack Hyperconverged Infrastructure

Name of the Vulnerable Software and Affected Versions: Azure Stack Hyperconverged Infrastructure HCI affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Stack Hyperconverged Infrastructure HCI due to a lack of authorization...

PT-2024-6730 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to the implementation of the Kerberos authentication protocol in Windows operating systems, specifically due to shortcomings in the authorization procedure. This allows...

PT-2024-6794 · Microsoft · Windows Kernel +1

Name of the Vulnerable Software and Affected Versions: Windows Kernel affected versions not specified Description: The issue is related to the use of memory after it has been freed, which can be exploited to elevate privileges. This can allow an attacker to affect the system. There is no...

PT-2024-6806 · Microsoft · Power Bi Report Server

Name of the Vulnerable Software and Affected Versions: Power BI Report Server versions affected versions not specified Description: The issue is related to the Power BI Report Server, where a lack of proper web page structure protection can be exploited. This can allow a remote attacker to perfor...

PT-2024-7255 · Abb · Abb Ac 800M

Name of the Vulnerable Software and Affected Versions: ABB AC 800M affected versions not specified Description: The issue is related to errors in processing input data in the ABB AC 800M controller firmware. It allows a remote attacker to execute arbitrary commands by sending specially crafted MM...

PT-2024-6838 · Microsoft · Windows Local Security Authority +1

Name of the Vulnerable Software and Affected Versions: Windows Local Security Authority LSA affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This allows an attacker to affect the system. Recommendations...

PT-2024-6757 · Microsoft · Windows Remote Desktop Licensing Service +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to the use of insecure mechanisms for handling authentication data in the operating system's memory. It allows remote attackers to...

PT-2024-6755 · Microsoft · Windows Hyper-V +1

Name of the Vulnerable Software and Affected Versions: Windows Hyper-V affected versions not specified Description: The issue is related to the Windows Hyper-V hardware virtualization system and is connected to the inclusion of features from an untrusted controlled area. This can allow a remote...

PT-2024-6721 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in dynamic memory, which can be exploited by a remote attacker to execute arbitrary code. This allows the...

PT-2025-11514 · Dell · Os10

Name of the Vulnerable Software and Affected Versions: Dell SmartFabric OS10 Software versions 10.5.4.x through 10.6.0.x Description: The issue is related to an Improper Neutralization of Special Elements used in a Command, also known as Command Injection. This could allow a low-privileged attack...

PT-2024-6919 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a spoofing vulnerability in the Windows Secure Channel component, which is associated with errors in the certificate authentication procedure. This vulnerability can...

PT-2024-6844 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This could allow an attacker to affect the system. Recommendations: At the moment, there i...

PT-2024-6764 · Microsoft · Windows Resilient File System +1

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability in the Windows Resilient File System ReFS. It is caused by a memory reuse error, which can be...

PT-2024-6740 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing remote attackers to execute arbitrary code. This can enable a remote attacker to perform...

PT-2024-6799 · Microsoft · Windows Graphics +1

Name of the Vulnerable Software and Affected Versions: Windows Graphics Component affected versions not specified Description: The issue is related to a use-after-free vulnerability in the Windows Graphics Component, which can be exploited to elevate privileges. This vulnerability allows attacker...

PT-2024-6723 · Microsoft · Windows Remote Desktop Protocol Server +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Protocol Server affected versions not specified Description: The issue is related to a use after free vulnerability in the Remote Desktop Protocol Server of Windows operating systems, which can allow a remote attacker t...