CVE-2024-10944 FactoryTalk® Updater Remote Code Execution

A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed...

Security Bulletin: Multiple Vulnerabilities in IBM Event Streams

Summary Multiple vulnerabilities were addressed in IBM Event Streams version 11.5.1. Vulnerability Details CVEID:CVE-2024-29041 DESCRIPTION: Express.js Express could allow a remote attacker to conduct phishing attacks, caused by an open redirect vulnerability. An attacker could exploit this...

Security Bulletin: IBM Sterling Connect:Direct Web Services is uses spring-web-6.0.21.jar which is vulnerable to denial of service

Summary IBM Sterling Connect:Direct Web Services uses VMware Tanzu Spring Framework is vulnerable to a denial of service, caused by improper input validation. Vulnerability Details CVEID:CVE-2024-38809 DESCRIPTION: VMware Tanzu Spring Framework is vulnerable to a denial of service, caused by...

PT-2024-8847 · Intel · Intel Server Board S2600St Family Bios/Firmware Update

Name of the Vulnerable Software and Affected Versions: IntelR Server Board S2600ST Family BIOS and Firmware Update software all versions Description: The issue is related to improper input validation in the BIOS and firmware update software, which may allow a privileged user to potentially enable...

PT-2024-8766

Name of the Vulnerable Software and Affected Versions: Intel Neural Compressor versions prior to v3.0 Description: The issue is related to improper input validation in the Intel Neural Compressor software, which may allow an unauthenticated user to potentially enable escalation of privilege via...

PT-2024-8841

Name of the Vulnerable Software and Affected Versions: IntelR Distribution of OpenVINOTM Model Server versions prior to 2024.0 Description: The issue is related to improper input validation in the software, which may allow an unauthenticated user to potentially enable denial of service via adjace...

CVE-2024-39281: Improper Input Validation

The command ctlpersistentreserveout allows the caller to specify an arbitrary size which will be passed to the kernel's memory allocator...

CVE-2024-10944: Improper Input Validation

A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed...

PT-2024-19131

Name of the Vulnerable Software and Affected Versions NPU driver affected versions not specified Description The issue is related to improper input validation in the NPU driver, which could allow an attacker to supply a specially crafted pointer, potentially leading to arbitrary code execution...

PT-2024-9209

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.11 Apache Traffic Server versions 9.0.0 through 9.2.5 Description: The issue is related to improper input validation, which can allow a remote attacker to implement a cache poisoning attack. Th...

CVE-2024-11079: Improper Input Validation

A flaw was found in Ansible-Core. This vulnerability allows attackers to bypass unsafe content protections using the hostvars object to reference and execute templated content. This issue can lead to arbitrary code execution if remote data or module outputs are improperly templated within playboo...

CVE-2024-49033: Improper Input Validation

Microsoft Word Security Feature Bypass Vulnerability...

CVE-2024-50386: Improper Input Validation

Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker...

CVE-2024-21975: Improper Input Validation

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21974: Improper Input Validation

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-21949: Improper Input Validation

Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash...

CVE-2024-21976: Improper Input Validation

Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution...

CVE-2024-50560: Improper Input Validation

A vulnerability has been identified in RUGGEDCOM RM1224 LTE4G EU 6GK6108-4AM00-2BA2 All versions V8.2, RUGGEDCOM RM1224 LTE4G NAM 6GK6108-4AM00-2DA2 All versions V8.2, SCALANCE M804PB 6GK5804-0AP00-2AA2 All versions V8.2, SCALANCE M812-1 ADSL-Router 6GK5812-1AA00-2AA2 All versions V8.2, SCALANCE...

ALSA-2024:9454 Important: podman security update

The podman tool manages pods, container images, and containers. It is part of the libpod library, which is for applications that use container pods. Container pods is a concept in Kubernetes. Security Fixes: go/parser: golang: Calling any of the Parse functions containing deeply nested literals c...

PT-2024-8820

Name of the Vulnerable Software and Affected Versions: Intel CIP software versions prior to 2.4.10852 Description: The issue is related to improper input validation in Intel CIP software, which may allow a privileged user to potentially enable escalation of privilege via local access. This could...