NVIDIA GPU Display Driver - July 2024 - Lenovo Support US

No description provided...

Security Advisory: Ivanti Neurons for ITSM (CVE-2024-7569, CVE-2024-7570)

Last Modified Date Aug 23, 2026 11:33:04 PM...

Security Advisory Ivanti Avalanche 6.4.4 (CVE-2024-38652, CVE-2024-38653, CVE-2024-36136, CVE-2024-37399, CVE-2024-37373)

Last Modified Date Aug 23, 2026 11:38:16 PM...

SUSE CVE-2024-7533

Use after free in Sharing in Google Chrome on iOS prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

SUSE CVE-2024-7534

Heap buffer overflow in Layout in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

WordPress HUSKY Plugin <= 1.3.6.1 is vulnerable to Privilege Escalation

Software HUSKY Type Plugin Vulnerable versions = 1.3.6.1 Fixed in 1.3.6.2 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-43121 Patch priority High CVSS severity High 9.1 Developer Claim ownership PSID d01fc5fea986 Credits Rafie Muhamma...

WordPress Woffice Theme <= 5.4.10 is vulnerable to Privilege Escalation

Software Woffice Type Theme Vulnerable versions = 5.4.10 Fixed in 5.4.12 OWASP Top 10 A7: Identification and Authentication Failures Classification Privilege Escalation CVE CVE-2024-43153 Patch priority High CVSS severity High 9.8 Developer Claim ownership PSID f1d354bce137 Credits Rafie Muhammad...

WordPress Docket (WooCommerce Collections / Wishlist / Watchlist) Plugin < 1.7.0 is vulnerable to Arbitrary Content Deletion

Software Docket WooCommerce Collections / Wishlist / Watchlist Type Plugin Vulnerable versions 1.7.0 Fixed in 1.7.0 OWASP Top 10 A1: Broken Access Control Classification Arbitrary Content Deletion CVE CVE-2024-43131 Patch priority High CVSS severity High 7.5 Developer Claim ownership PSID...

CVE-2024-7550

Type Confusion in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-7536

Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-7536

Use after free in WebAudio in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-7535

Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-7536

CVE-2024-7536 affects Chromium-based browsers (Google Chrome/Chromium) via a use-after-free in the WebAudio module, enabling potential heap corruption from a crafted HTML page. Affected versions are Chrome/Chromium before 127.0.6533.99; impact is high (C/H, I/H, A/H) with network access and user ...

CVE-2024-7535

Inappropriate implementation in V8 in Google Chrome prior to 127.0.6533.99 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6991

Use after free in Dawn in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2024-6989

Use after free in Loader in Google Chrome prior to 127.0.6533.72 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

GHSA-F83W-WQHC-CFP4 Matrix SDK for React's URL preview setting for a room is controllable by the homeserver

Impact A malicious homeserver could manipulate a user's account data to cause the client to enable URL previews in end-to-end encrypted rooms, in which case any URLs in encrypted messages would be sent to the server. Even if the CVSS score would be 4.1 AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:N/A:N the...

PT-2024-5755 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 127.0.6533.99 Microsoft Edge affected versions not specified Description: The issue is related to a use after free flaw in the Sharing component, which could allow a remote attacker to potentially exploit heap...

WordPress YayExtra Plugin <= 1.3.7 is vulnerable to Arbitrary File Upload

Software YayExtra Type Plugin Vulnerable versions = 1.3.7 Fixed in 1.3.8 OWASP Top 10 A1: Injection Classification Arbitrary File Upload CVE CVE-2024-7257 Patch priority High CVSS severity High 10 Developer Claim ownership PSID 6980efb16c4d Credits wesley wcraft Required privilege Unauthenticated...

PT-2024-38323

Name of the Vulnerable Software and Affected Versions Samsung MagicINFO 9 Server versions prior to 21.1050 Description An improper limitation of a pathname to a restricted directory allows unauthenticated remote attackers to write arbitrary files with system authority. This issue is linked to the...