CVE-2023-43040

IBM Spectrum Fusion HCI 2.5.2 through 2.7.2 could allow an attacker to perform unauthorized actions in RGW for Ceph due to improper bucket access. IBM X-Force ID: 266807...

PT-2024-15316

Name of the Vulnerable Software and Affected Versions TBD affected versions not specified Description The issue is related to a possible confusion of OEM and DRM certificates due to improperly used crypto. This could lead to a local bypass of DRM content protection with no additional execution...

CVE-2024-34148: Improperly Controlled Modification of Object Prototype Attributes

Jenkins Subversion Partial Release Manager Plugin 1.0.1 and earlier programmatically disables the fix for CVE-2016-3721 whenever a build is triggered from a release tag, by setting the Java system property 'hudson.model.ParametersAction.keepUndefinedParameters'...

CVE-2024-26242: Sensitive Data Storage in Improperly Locked Memory

Windows Telephony Server Elevation of Privilege Vulnerability...

CVE-2024-26236: Sensitive Data Storage in Improperly Locked Memory

Windows Update Stack Elevation of Privilege Vulnerability...

CVE-2024-21446: Sensitive Data Storage in Improperly Locked Memory

NTFS Elevation of Privilege Vulnerability...

CVE-2023-42509: Improper Handling of Exceptional Conditions

JFrog Artifactory later than version 7.17.4 but prior to version 7.77.0 is vulnerable to an issue whereby a sequence of improperly handled exceptions in repository configuration initialization steps may lead to exposure of sensitive data...

CVE-2023-43539

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame...

Authorization

Transient DOS while processing an improperly formatted 802.11az Fine Time Measurement protocol frame...

PT-2024-13112 · Qualcomm · Snapdragon +141

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves a transient Denial of Service DOS that occurs when processing an improperly formatted 802.11az Fine Time Measurement protocol frame. ...

CentOS 9 : keylime-6.5.2-1.el9

The remote CentOS Linux 9 host has packages installed that are affected by a vulnerability as referenced in the keylime-6.5.2-1.el9 build changelog. - A vulnerability was found in keylime. This security issue happens in some circumstances, due to some improperly handled exceptions, there exists t...

CVE-2024-21405: Sensitive Data Storage in Improperly Locked Memory

Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...

CVE-2024-21355: Sensitive Data Storage in Improperly Locked Memory

Microsoft Message Queuing MSMQ Elevation of Privilege Vulnerability...

CVE-2023-42282

The ip package before 1.1.9 for Node.js might allow SSRF because some IP addresses such as 0x7f.1 are improperly categorized as globally routable via isPublic...

CVE-2024-20686: Sensitive Data Storage in Improperly Locked Memory

Win32k Elevation of Privilege Vulnerability...

CVE-2023-51379

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content as it also required contents:write and issues:read...

Authorization

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content as it also required contents:write and issues:read...

Authorization

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be read with an improperly scoped token. This vulnerability affected all versions of GitHub Enterprise Server since 3.7 and was fixed in version 3.17.19, 3.8.12, 3.9.7, 3.10.4, and...

PT-2023-31800 · Github · Github Enterprise Server

Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server versions 3.7 through 3.7.18 GitHub Enterprise Server versions 3.8 through 3.8.11 GitHub Enterprise Server versions 3.9 through 3.9.6 GitHub Enterprise Server versions 3.10 through 3.10.3 GitHub Enterprise Server...

CVE-2023-51379: Incorrect Authorization

An incorrect authorization vulnerability was identified in GitHub Enterprise Server that allowed issue comments to be updated with an improperly scoped token. This vulnerability did not allow unauthorized access to any repository content as it also required contents:write and issues:read...