CVE-2024-43369 Persistent Cross-site Scripting in Ibexa RichText Field Type

Ibexa RichText Field Type is a Field Type for supporting rich formatted text stored in a structured XML format. In versions on the 4.6 branch prior to 4.6.10, the validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS. This can leave other options open,...

CVE-2024-43369 Persistent Cross-site Scripting in Ibexa RichText Field Type

Ibexa RichText Field Type is a Field Type for supporting rich formatted text stored in a structured XML format. In versions on the 4.6 branch prior to 4.6.10, the validator for the RichText fieldtype blocklists javascript: and vbscript: in links to prevent XSS. This can leave other options open,...

kernel: wifi: cfg80211: check A-MSDU format more carefully

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When parsing an Aggregate MAC Service Data Unit A-MSDU, insufficient validation of subframe headers can cause an out-of-bounds memory read. An attacker within wireless network range transmitting specially crafted frames could...

kernel: wifi: cfg80211: check A-MSDU format more carefully

A flaw was found in the Linux kernel's cfg80211 wireless subsystem. When parsing an Aggregate MAC Service Data Unit A-MSDU, insufficient validation of subframe headers can cause an out-of-bounds memory read. An attacker within wireless network range transmitting specially crafted frames could...

Rockwell Automation AADvance Standalone OPC-DA Server

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 9.8 ATTENTION : Exploitable remotely/low attack complexity Vendor : Rockwell Automation Equipment : AADvance Standalone OPC-DA Server Vulnerabilities : Improper Input Validation, Use of Externally Controlled Format String 2. RISK EVALUATION Successful...

Microsoft CLIPSP.SYS License update privilege escalation vulnerability

Talos Vulnerability Report TALOS-2024-1966 Microsoft CLIPSP.SYS License update privilege escalation vulnerability August 13, 2024 CVE Number CVE-2024-38186 SUMMARY A privilege escalation vulnerability exists in the License update functionality of Microsoft CLIPSP.SYS 10.0.22621 Build 22621,...

Juniper Networks’ Junos OS Packet Forwarding Engine DoS

The vulnerability of the Packet Forwarding Engine PFE module in Juniper Networks’ Junos OS on SRX Series devices is related to the use of uncontrolled format strings. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

kimageformats:kimgio_xcf_fuzzer: Heap-buffer-overflow in XCFImageFormat::loadTileRLE

Project: git://anongit.kde.org/kimageformats Detailed Report: https://oss-fuzz.com/testcase?key=6467832601182208 Project: kimageformats Fuzzing Engine: libFuzzer Fuzz Target: kimgioxcffuzzer Job Type: libfuzzerasankimageformats Platform Id: linux Crash Type: Heap-buffer-overflow WRITE 1 Crash...

PT-2024-6854

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the dasd ese needs format function in the Linux kernel, which checks for error codes signaling the non-existence of a proper track format. The check for incorrect...

ASoC: SOF: ipc4-topology: Fix input format query of process modules without base extension

...

PT-2024-7806 · Autodesk · Autodesk Navisworks

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks affected versions not specified Description: A maliciously crafted DWFX file, when parsed in w3dtk.dll through Autodesk Navisworks, can force an Out-of-Bounds Read. This can allow a malicious actor to cause a crash, read...

PT-2024-7804 · Autodesk · Autodesk Navisworks

Name of the Vulnerable Software and Affected Versions: Autodesk Navisworks affected versions not specified Description: A maliciously crafted DWF file, when parsed in w3dtk.dll through Autodesk Navisworks, can force a Use-After-Free. This issue allows a malicious actor to cause a crash or execute...

OESA-2024-1968 qpdf security update

QPDF is a command-line program that does structural, content-preserving transformations on PDF files. It could have been called something like pdf-to-pdf. It also provides many useful capabilities to developers of PDF-producing software or for people who just want to look at the innards of a PDF...

PT-2024-31333

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, specifically with the binfmt flat format. A RISC-V specific variant of this format was introduced, which does not allocate space for the array o...

NVIDIA CUDA Toolkit security vulnerabilities

NVIDIA CUDA Toolkit is a development software application for creating high-performance GPU-accelerated applications from NVIDIA. The software supports the development, optimization and deployment of applications installed on GPU-accelerated embedded systems, desktop workstations, enterprise data...

SUSE CVE-2024-28576

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to cause a denial of service DoS via the opjj2ktcpdestroy function when reading images in J2K format...

RHEL 8 : libtiff (RHSA-2024:5079)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:5079 advisory. The libtiff packages contain a library of functions for manipulating Tagged Image File Format TIFF files. Security Fixes: libtiff: Heap-base...

libXpm: Multiple Vulnerabilities

Background The X PixMap image format is an extension of the monochrome X BitMap format specified in the X protocol, and is commonly used in traditional X applications. Description Multiple vulnerabilities have been discovered in libXpm. Please review the CVE identifiers referenced below for...

CVE-2024-28739

An issue in Koha ILS 23.05 and before allows a remote attacker to execute arbitrary code via a crafted script to the format parameter...

SUSE CVE-2024-28566

Buffer Overflow vulnerability in open source FreeImage v.3.19.0 r1909 allows a local attacker to execute arbitrary code via the AssignPixel function when reading images in TIFF format...