PT-2024-36944

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.74 Description The issue is related to the geneve module in the Linux kernel, where it was assumed that the mac header is set in the output path. This assumption is incorrect, and the issue has been resolved ...

CVE-2024-50381

A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a reque...

CVE-2024-50380

Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device...

CVE-2024-50381 Missing Authentication for Critical Function in Snap One OVRC cloud

A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a reque...

CVE-2024-50380

CVE-2024-50380 affects Snap One OvrC cloud where MAC addresses are used as identifiers to disclose device information. Affected component: OvrC cloud platform; vulnerability path allows an attacker to impersonate other devices by supplying enumerated MAC addresses and receive sensitive device inf...

CVE-2024-50380 Authentication Bypass by Spoofing in Snap One OVRC cloud

Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device...

CVE-2024-50380 Authentication Bypass by Spoofing in Snap One OVRC cloud

Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device...

Snap One OvrC security vulnerability

Snap One OvrC is a free cloud-based remote management and monitoring platform from US-based Snap One. A security vulnerability exists in Snap One OvrC versions prior to 7.3 that stems from the use of a MAC address as an identifier to provide information upon request, which allows an attacker to...

Snap One OvrC security vulnerability

Snap One OvrC is a free cloud-based remote management and monitoring platform from US-based Snap One. A security vulnerability exists in Snap One OvrC versions prior to 7.3, which stems from the ability to impersonate a Hub device and send requests to claim and unclaim the device.The attacker can...

CVE-2024-50381: Missing Authentication for Critical Function

A vulnerability exists in Snap One OVRC cloud where an attacker can impersonate a Hub device and send requests to claim and unclaim devices. The attacker only needs to provide the MAC address of the targeted device and can make a request to unclaim it from its original connection and make a reque...

CVE-2024-50380: Authentication Bypass by Spoofing

Snap One OVRC cloud uses the MAC address as an identifier to provide information when requested. An attacker can impersonate other devices by supplying enumerated MAC addresses and receive sensitive information about the device...

CVE-2024-47193

WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow a remote Denial of Service...

CVE-2024-47193

WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow a remote Denial of Service...

PT-2024-32473 · Withsecure · Elements Client Security For Mac +2

Name of the Vulnerable Software and Affected Versions: WithSecure Elements Agent for Mac versions prior to 24.3 MDR versions prior to 24.3 Elements Client Security for Mac versions prior to 16.10 Description: The issue allows a remote Denial of Service. Recommendations: For WithSecure Elements...

CVE-2024-47193

WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow a remote Denial of Service...

EasyTax security vulnerability

EasyTax is a taxpayer tax filing software organized by AG Switzerland. A security vulnerability exists in EasyTax 2023 version 1.2 and earlier, which stems from an XML External Entity XXE vulnerability on multiple platforms, including Windows, Linux, and macOS...

CVE-2024-47193

Several WithSecure products are vulnerable to a remote Denial of Service (DoS) . The affected components include Elements Agent for Mac (versions before 24.3), MDR (versions before 24.3), and Elements Client Security for Mac (versions before 16.10). While one source mentions a local user's abilit...

CVE-2024-47193: Undefined Security Weakness

WithSecure Elements Agent for Mac before 24.3, MDR before 24.3, and Elements Client Security for Mac before 16.10 allow a remote Denial of Service...

Security Bulletin: Multiple vulnerabilities in Open JDK affecting Rational Functional Tester / DevOps Test UI

Summary There are multiple vulnerabilities in Open JDK used by Rational Functional Tester RFT / DevOps Test UI Test UI. RFT/Test UI has addressed the applicable CVEs. Vulnerability Details CVEID:CVE-2024-21208 DESCRIPTION: An unspecified vulnerability in Oracle Java SE, Oracle GraalVM for JDK,...

Mozilla Firefox ESR Security Update (MFSA2024-64) - Mac OS X

Firefox ESR is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefoxesr";...