PT-2024-12024

Name of the Vulnerable Software and Affected Versions Jensen of Scandinavia Eagle 1200AC version V15.03.06.33 en Description A command injection issue was discovered in the function formWriteFacMac, allowing attackers to execute arbitrary commands by manipulating the mac parameter. This enables...

Jensen of Scandinavia Eagle 1200AC Security Vulnerability

Jensen of Scandinavia Eagle 1200AC is a router from Jensen. A security vulnerability exists in the Jensen Eagle 1200AC version V15.03.06.33en. An attacker can exploit this vulnerability to execute arbitrary commands by manipulating mac parameters...

PT-2024-1807 · Apple · Macos Sonoma +3

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.3 iOS versions prior to 17.3 iPadOS versions prior to 17.3 Description: The issue is related to errors in processing permissions in the Shortcuts component of iOS, macOS, and iPadOS operating systems. This ma...

PT-2024-1264 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS Sonoma versions prior to 14.3 watchOS versions prior to 10.3 tvOS versions prior to 17.3 iOS versions prior to 17.3 iPadOS versions prior to 17.3 Description: The issue is related to the handling of temporary files, which may allow an a...

OESA-2024-1081 openssh security update

OpenSSH is the premier connectivity tool for remote login with the SSH protocol. \ It encrypts all traffic to eliminate eavesdropping, connection hijacking, and \ other attacks. In addition, OpenSSH provides a large suite of secure tunneling \ capabilities, several authentication methods, and...

Foxit PDF Editor for Mac < 11.1.6 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 11.1.6. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerabili...

Foxit PDF Editor for Mac < 12.1.2 Multiple Vulnerabilities

According to its version, the Foxit PDF Editor for Mac application previously named Foxit PhantomPDF for Mac installed on the remote macOS host is prior to 12.1.2. It is, therefore affected by multiple vulnerabilities: - Foxit PDF Reader templates Use-After-Free Information Disclosure Vulnerabili...

Google Chrome Security Update (stable-channel-update-for-desktop_16-2024-01) - Mac OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

CVE-2023-6336

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on MacOS allows User-Controlled Filename.This issue affects Workforce Access: before 8.7...

CVE-2023-22514

This High severity RCE Remote Code Execution vulnerability was introduced in version 3.4.14 of Sourcetree for Mac and Sourcetree for Windows. This RCE Remote Code Execution vulnerability, with a CVSS Score of 7.8, and a CVSS Vector of: CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H which allows an...

CVE-2024-0579

A vulnerability classified as critical was found in Totolink X2000R 1.0.0-B20221212.1452. Affected by this vulnerability is the function formMapDelDevice of the file /boafrm/formMapDelDevice. The manipulation of the argument macstr leads to command injection. The attack can be launched remotely...

Stable Channel Update for Desktop

The Stable channel has been updated to 120.0.6099.234 for Mac and 120.0.6099.224 for Linux and 120.0.6099.224/225 to Windows which will roll out over the coming days/weeks. A full list of changes in this build is available in the Log. The Extended Stable channel has been updated to 120.0.6099.234...

Debian dsa-5600 : php-phpseclib - security update

The remote Debian 11 / 12 host has a package installed that is affected by a vulnerability as referenced in the dsa-5600 advisory. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5600-1...

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2023-3255)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications...

EulerOS 2.0 SP11 : openssl (EulerOS-SA-2023-3283)

According to the versions of the openssl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Issue summary: The POLY1305 MAC message authentication code implementation contains a bug that might corrupt the internal state of applications...

PT-2024-14933 · Hypr · Hypr Workforce Access

Name of the Vulnerable Software and Affected Versions: HYPR Workforce Access versions prior to 8.7 Description: The issue is related to an Improper Link Resolution Before File Access, also known as 'Link Following', which allows User-Controlled Filename. This affects HYPR Workforce Access on MacO...

CVE-2024-0542

A vulnerability was found in Tenda W9 1.0.0.74456. It has been rated as critical. Affected by this issue is the function formWifiMacFilterGet of the component httpd. The manipulation of the argument index leads to stack-based buffer overflow. The attack may be launched remotely. The exploit has...

CVE-2024-0534

A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch...

CVE-2024-0534: Stack-based Buffer Overflow

A vulnerability classified as critical has been found in Tenda A15 15.13.07.13. Affected is an unknown function of the file /goform/SetOnlineDevName of the component Web-based Management Interface. The manipulation of the argument mac leads to stack-based buffer overflow. It is possible to launch...

Tenda A15 security vulnerabilities

Tenda A15 is a WiFi extender from Tenda China. A buffer overflow vulnerability exists in Tenda A15 version 15.13.07.13, which originates from the mac parameter of the /goform/SetOnlineDevName file failing to correctly validate the length of the input data, and can be exploited by a remote attacke...