Adobe Audition < 14.4.2 Multiple Vulnerabilities (APSB21-92) (macOS)

The version of Adobe Audition installed on the remote macOS host is prior to 14.4.2. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-92 advisory. - Adobe Audition version 14.4 and earlier is affected by a memory corruption vulnerability when parsing a M4A file,...

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

Microsoft has disclosed details about a now-patched security flaw in Apple's Transparency, Consent, and Control TCC framework in macOS that has likely come under exploitation to get around a user's privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is track...

JetBrains TeamCity Path Traversal Vulnerability

JetBrains TeamCity is a set of distributed build management and continuous integration tools from the Czech company JetBrains. The tool provides continuous unit testing, code quality analysis and build problem analysis reports and other features. A path traversal vulnerability exists in JetBrains...

Malicious code in middleware-location-constraint (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9709 Malicious code in middleware-location-constraint (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2020-36835

The Migration, Backup, Staging – WPvivid plugin for WordPress is vulnerable to sensitive information disclosure of a WordPress site's database due to missing capability checks on the wpajaxwpvividaddremote AJAX action that allows low-level authenticated attackers to send back-ups to a remote...

CVE-2020-36835

The CVE-2020-36835 entry concerns the WordPress WPvivid Migration, Backup, Staging plugin. Affected component: wp_ajax_wpvivid_add_remote AJAX action. Root cause: missing capability checks allow low‑level authenticated attackers to exfiltrate the WordPress site database by sending backups to a re...

ftrace: Fix possible use-after-free issue in ftrace_location()

...

CVE-2024-45142 Substance3D - Stager | Write-what-where Condition (CWE-123)

Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could allow an attacker to execute arbitrary code in the context of the current user. This vulnerability allows an attacker to write a controlled value to an arbitrary memory location,...

CVE-2024-45142 Substance3D - Stager | Write-what-where Condition (CWE-123)

Substance3D - Stager versions 3.0.3 and earlier are affected by a Write-what-where Condition vulnerability that could allow an attacker to execute arbitrary code in the context of the current user. This vulnerability allows an attacker to write a controlled value to an arbitrary memory location,...

CentOS 7 : firefox (RHSA-2021:5014)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2021:5014 advisory. - Mozilla developers and community members Julian Hector, Randell Jesup, Gabriele Svelto, Tyson Smith, Christian Holler, and Masayuki Nakano reported...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2024-47949

In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location...

CVE-2024-33066

Memory corruption while redirecting log file to any file location with any file name...

CVE-2024-33066 Improper Input Validation in WLAN Resource Manager

Memory corruption while redirecting log file to any file location with any file name...

CVE-2024-33066

CVE-2024-33066 is described in connected sources as a memory corruption flaw caused by improper input validation in the WLAN Resource Manager. Affected component: WLAN Resource Manager on Qualcomm chipsets. The provided documents do not specify affected products/versions, exploitation status, or ...

The vulnerabilities of the functions urlparse() and urljoin() in the WebOb library, which are used for analyzing HTTP requests and generating HTTP responses, allow a hacker to redirect users to any given URL address.

The vulnerability of the urlparse and urljoin functions in the WebOb library, which are used for analyzing HTTP requests and generating HTTP responses, relates to the redirection of URLs to unreliable websites when processing the HTTP Location header. Exploiting this vulnerability allows a remote...

webob: WebOb's location header normalization during redirect leads to open redirect

A vulnerability was found in the WebOb package. WebOb normalizes the HTTP Location header using urlparse and urljoin. If the URL starts with //, urlparse treats the following part as the hostname, and replaces the original request's hostname. This issue, combined with user interaction, may become...

webob: WebOb's location header normalization during redirect leads to open redirect

A vulnerability was found in the WebOb package. WebOb normalizes the HTTP Location header using urlparse and urljoin. If the URL starts with //, urlparse treats the following part as the hostname, and replaces the original request's hostname. This issue, combined with user interaction, may become...

ROS-20241001-07

Vulnerability in DecodeConfig component of Golang programming language is related to incorrect normalization of HTTP Location header. HTTP Location header. Exploitation of the vulnerability could allow an attacker acting remotely, redirect the user to a malicious site...