Advisory ROSA-SA-2024-2515

Software: httpd 2.4.6 OS: rosa-server79 packageevrstring: httpd-2.4.6-99.0.5.res7.1 CVE-ID: CVE-2021-26690 BDU-ID: 2021-03681 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Apache HTTP Server web server is related to pointer dereferencing errors. Exploitation of the vulnerability could allow an...

ROS-20240820-16

A vulnerability in the filtervar function of the PHP programming language interpreter is related to insufficient data authentication. data authentication. Exploitation of the vulnerability could allow an attacker acting remotely, spoof URLs with erroneous data...

The vulnerability of the Updater component of the Google Chrome browser, which allows a hacker to escalate their privileges.

The vulnerability of the Updater component in Google Chrome browser is related to insufficient verification of data authenticity. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

ROS-20240410-25

A vulnerability in e-Tugra root certificates of SSL Certifi's SSL certificate validation package is related to with insufficient data authentication. Exploitation of the vulnerability could allow an attacker, acting remotely to execute a man-in-the-middle attack...

ROS-20240408-16

A vulnerability in SendMail SMTP Server software is related to insufficient data authentication data. Exploitation of the vulnerability could allow a remote attacker to bypass the security mechanism and inject e-mail messages with a spoofed MAIL FROM address. security mechanism and inject e-mail...

PT-2023-9182 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: The issue is related to insufficient data authentication in the Trend Micro Apex One security agent, which could allow a local attacker to escalate privileges on affected...

PT-2023-9181 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Description: The issue is related to insufficient data authentication in the Trend Micro Apex One security agent, allowing a local attacker to escalate privileges on affected installations...

PT-2023-5485

Name of the Vulnerable Software and Affected Versions VideoEdge affected versions not specified Description The issue is related to insufficient data authentication in the VideoEdge network video recorder software. This could allow an attacker to edit configuration files, potentially leading to a...

PT-2023-3878 · Honeywell · Honeywell Experion Pks +2

Name of the Vulnerable Software and Affected Versions: Honeywell Experion PKS affected versions not specified Honeywell Experion LX affected versions not specified Experion PlantCruise affected versions not specified Description: The issue is related to insufficient data authentication in the...

PT-2022-3172

Name of the Vulnerable Software and Affected Versions Ovation OCR400 affected versions not specified Ovation OCR1100 affected versions not specified Description The issue is related to insufficient data authentication in the embedded software images of the Ovation systems. This can allow a remote...

PT-2022-4997

Name of the Vulnerable Software and Affected Versions STARDOM FCN/FCJ affected versions not specified Description The issue is related to insufficient data authentication in the programmable logic controller's software, which could allow a remote attacker to execute arbitrary code. Recommendation...

PT-2022-38104

Уязвимость функции create log context модуля drivers/md/dm-log.c драйвера поддержки нескольких устройств RAID и LVM ядра операционной системы Linux связана с недостаточной проверкой подлинности данных. Эксплуатация уязвимости может позволить нарушителю вызвать отказ в обслуживании...

Dell Client Commercial 数据伪造问题漏洞

Dell Client Commercial is a line of workstation equipment from Dell, Inc. The Dell Client Commercial has a security vulnerability that stems from the device's susceptibility to an insufficient data authentication vulnerability. An authenticated attacker could use this vulnerability to install...

PT-2020-1985

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description The issue is related to insufficient data authentication in the anycast gateway feature of Cisco NX-OS Software. This could allow an unauthenticated, adjacent attacker to cause a...

PT-2019-6058

Name of the Vulnerable Software and Affected Versions Adobe Download Manager version 2.0.0.363 Description The issue is related to insecure file permissions and insufficient data authentication, which could allow a remote attacker to escalate privileges. Recommendations For Adobe Download Manager...

PT-2018-1431

Name of the Vulnerable Software and Affected Versions Medtronic MyCareLink Patient Monitor versions 24950 and 24952 Description The issue is related to insufficient data authentication in the Medtronic MyCareLink Patient Monitor. This could allow a remote attacker to upload arbitrary information ...