CVE-2024-6600

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...

CVE-2024-6600 Memory corruption in WebGL API

Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when allocating more than 8192 ints in private shader memory on macOS. This vulnerability affects Firefox 128, Firefox ESR 115.13, Thunderbird 115.13, and Thunderbird 128...

CVE-2024-6600

A memory corruption vulnerability in the WebGL API of Mozilla Firefox (and associated products) allows a remote attacker to trigger an out-of-bounds access . The root cause is due to Angle for GLSL shaders having lenient allocation checks when allocating more than 8192 integers in private shader ...

Siemens RUGGEDCOM information leakage vulnerability

Siemens RuggedCom ROS is an operating system from Siemens, Germany, used in the RuggedCom series of switches. An information disclosure vulnerability exists in Siemens RUGGEDCOM ROS, which can be exploited by an attacker to retrieve a MACSEC key and access decrypt Ethernet frames sent by an...

PT-2024-5884

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 128 Mozilla Firefox ESR versions prior to 115.13 Mozilla Thunderbird versions prior to 115.13 Mozilla Thunderbird versions prior to 128 Description The issue is related to an out-of-bounds access in Angle for...

Node.js 20.x < 20.15.1, 21.x < 22.4.1 Multiple Vulnerabilities - Mac OS X

Node.js is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:nodejs:node.js"; ifdescription...

Security Vulnerabilities fixed in Firefox ESR 115.13 — Mozilla

An error in the ECMA-262 specification relating to Async Generators could have resulted in a type confusion, potentially leading to memory corruption and an exploitable crash. Due to large allocation checks in Angle for GLSL shaders being too lenient an out-of-bounds access could occur when...

Mozilla Firefox ESR < 115.13

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.13. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2024-30 advisory. - Memory safety bugs present in Firefox 127, Firefox ESR 115.12, and Thunderbird 115.12. Some of these bu...

kernel: net: qcom/emac: fix UAF in emac_remove

A vulnerability was found in the Linux kernel's Qualcomm EMAC driver, where the emacremove function can lead to a use-after-free issue when the driver tries to access data after the network device has been freed, causing instability and a crash in the network subsystem...

Tenable.ad < 3.59.5 Multiple Vulnerabilities (TNS-2024-11)

The version of Tenable.ad installed on the remote host is prior to 3.59.5. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2024-11 advisory. - The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of...

Icons may intermittently disappear in CWA for Mac after upgrading to version 2405

Icons may intermittently disappear in Citrix Workspace for Mac after upgrading from version 2402 or 2402.10 to version 2405...

CVE-2024-32754 Johnson Controls Kantech KT1, KT2, and KT400 Door Controllers - Exposure of Sensitive Information

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information...

Johnson Controls Kantech KT1, KT2, KT400 Security Vulnerability

The Johnson Controls Kantech KT1 is an Ethernet-enabled single-door controller.The Johnson Controls Kantech KT2 is an Ethernet-enabled two-door controller.The Johnson Controls Kantech KT400 is an Ethernet-enabled four-door controller. The Johnson Controls Kantech KT400 is an Ethernet-enabled...

CVE-2024-32754: Exposure of Sensitive Information to an Unauthorized Actor

Under certain circumstances, when the controller is in factory reset mode waiting for initial setup, it will broadcast its MAC address, serial number, and firmware version. Once configured, the controller will no longer broadcast this information...

Apple Mac OS X SEoL (10.15.x)

According to its version, Apple Mac OS X is 10.15.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Apple Mac OS X SEoL (10.6.x)

According to its version, Apple Mac OS X is 10.6.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Apple Mac OS X SEoL (10.10.x)

According to its version, Apple Mac OS X is 10.10.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Apple Mac OS X SEoL (10.7.x)

According to its version, Apple Mac OS X is 10.7.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Apple Mac OS X SEoL (10.4.x)

According to its version, Apple Mac OS X is 10.4.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...

Apple Mac OS X SEoL (10.11.x)

According to its version, Apple Mac OS X is 10.11.x. It is, therefore, no longer maintained by its vendor or provider. Lack of support implies that no new security patches for the product will be released by the vendor. As a result, it may contain security vulnerabilities. %NASLMINLEVEL 80900 C...