CVE-2024-49106: Sensitive Data Storage in Improperly Locked Memory

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2024-49097: Sensitive Data Storage in Improperly Locked Memory

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability...

CVE-2024-49095: Sensitive Data Storage in Improperly Locked Memory

Windows PrintWorkflowUserSvc Elevation of Privilege Vulnerability...

CVE-2024-49115: Sensitive Data Storage in Improperly Locked Memory

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2024-49108: Sensitive Data Storage in Improperly Locked Memory

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2024-49123: Sensitive Data Storage in Improperly Locked Memory

Windows Remote Desktop Services Remote Code Execution Vulnerability...

CVE-2024-43633: Sensitive Data Storage in Improperly Locked Memory

Windows Hyper-V Denial of Service Vulnerability...

CVE-2024-38264: Sensitive Data Storage in Improperly Locked Memory

Microsoft Virtual Hard Disk VHDX Denial of Service Vulnerability...

CVE-2024-45736

CVE-2024-45736 affects Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6, and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111. A low-privileged user without admin/power roles can craft a search query with an improperly formatted INGEST_EVAL parameter in a ...

CVE-2024-45736 Improperly Formatted ‘INGEST_EVAL’ Parameter Crashes Splunk Daemon

In Splunk Enterprise versions below 9.3.1, 9.2.3, and 9.1.6 and Splunk Cloud Platform versions below 9.2.2403.107, 9.1.2312.204, and 9.1.2312.111, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a search query with an improperly formatted "INGESTEVAL"...

CVE-2024-9139

CVE-2024-9139 relates to an OS command injection in MOXA devices (notably MOXA EDR-8010, EDR-G9004, EDR-G9010, EDF-G1002-BP, NAT-102, G4302-LTE4, TN-4900 among others). The root cause is failure to neutralize special elements in restricted commands, enabling a remote attacker to execute arbitrary...

CVE-2023-42133: Incorrect Default Permissions

PAX Android based POS devices allow for escalation of privilege via improperly configured scripts. An attacker must have shell access with system account privileges in order to exploit this vulnerability. A patch addressing this issue was included in firmware version...

CVE-2024-30118 HCL Connections is susceptible to a sensitive information disclosure vulnerability

HCL Connections is vulnerable to an information disclosure vulnerability which could allow a user to obtain sensitive information they are not entitled to because of improperly handling the request data...

CVE-2024-43563: Sensitive Data Storage in Improperly Locked Memory

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...

CVE-2024-38262: Sensitive Data Storage in Improperly Locked Memory

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an improperly initialized pointer...

CVE-2024-38263: Sensitive Data Storage in Improperly Locked Memory

Windows Remote Desktop Licensing Service Remote Code Execution Vulnerability...

CVE-2024-45299

alf.io is an open source ticket reservation system for conferences, trade shows, workshops, and meetups. Prior to version 2.0-M5, the preloaded data as json is not escaped correctly, the administrator / event admin could break their own install by inserting non correctly escaped text. The...

RUSTSEC-2024-0371 gix-path improperly resolves configuration path reported by Git

Summary gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or non-ASCII characters, in rare cases enabling a local attacker to inject configuration leading to code execution. Details In gixpath::env, th...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc. from Samsung South Korea. A security vulnerability exists in SAMSUNG Mobile devices SMR Sep-2024 Release 1 version and prior versions, which stems from an issue where the FeliCaTest component contai...