KLA73891 PE vulnerabilities in TeamViewer

Elevation of privilege vulnerabilities were found in TeamViewer. Malicious users can exploit these vulnerabilities to gain privileges. Original advisories Improper signature verification of driver installation in TeamViewer Remote clients Exploitation Public exploits exist for this vulnerability...

KLA73441 PE vulnerability in Microsoft Apps

An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-38183 Related products GroupMe CVE list CVE-2024-38183 critical Solution Install necessary updates from the KB section, that are...

KLA73914 DoS vulnerability in Wireshark

Denial of service vulnerability was found in Wireshark. Malicious users can exploit this vulnerability to cause denial of service. Original advisories wnpa-sec-2024-10 · SPRT dissector cras Related products Wireshark CVE list CVE-2024-8645 warning Solution Update to the latest version Download...

CVE-2024-1621 uniFLOW Online device registration susceptible to compromise

The registration process of uniFLOW Online NT-ware product apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or similar are impacted. This vulnerability may allo...

CVE-2024-1621

The CVE-2024-1621 issue affects uniFLOW Online (NT-ware) where the registration process can be compromised when email login is enabled on the tenant, prior to and including version 2024.1.0. The vulnerability allows an attacker to register themselves against a genuine user, enabling a malicious u...

CVE-2024-1621 uniFLOW Online device registration susceptible to compromise

The registration process of uniFLOW Online NT-ware product apps, prior to and including version 2024.1.0, can be compromised when email login is enabled on the tenant. Those tenants utilising email login in combination with Microsoft Safe Links or similar are impacted. This vulnerability may allo...

CVE-2024-38859 XSS in view page with SLA column

XSS in the view page with the SLA column configured in Checkmk versions prior to 2.3.0p14, 2.2.0p33, 2.1.0p47 and 2.0.0 EOL allowed malicious users to execute arbitrary scripts by injecting HTML elements into the SLA column title. These scripts could be executed when the view page was cloned by...

KLA71828 PE vulnerability in Microsoft Azure

Elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43477 CVE list CVE-2024-43477 high Solution Install necessary updates from the KB section, that are listed in your Windows Update...

KLA71649 PE vulnerability in Microsoft Browser

An elevation of privilege vulnerability was found in Microsoft Browser. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-43472 Related products Microsoft-Edge CVE list CVE-2024-43472 high Solution Install necessary updates from the Settings and more...

KLA71483 SUI vulnerability in Microsoft Apps

A spoofing vulnerability vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to spoof user interface. Original advisories CVE-2024-38177 CVE list CVE-2024-38177 critical Solution Install necessary updates from the KB section, that are listed in your Windows...

KLA71453 ACE vulnerability in PostgreSQL

Time-of-check Time-of-use TOCTOU race condition vulnerability was found in PostgreSQL. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories PostgreSQL: CVE-2024-7348: PostgreSQL relation replacement during pgdump executes arbitrary SQL Related products...

KLA71412 OSI vulnerability in Microsoft Office

Information disclosure vulnerability was found in Microsoft Office. Malicious users can exploit this vulnerability to obtain sensitive information. Original advisories CVE-2024-38206 CVE list CVE-2024-38206 critical Solution Install necessary updates from the KB section, that are listed in your...

KLA71014 PE vulnerabilities in Microsoft Apps

Elevation of privilege vulnerabilities were found in Microsoft Apps. Malicious users can exploit this vulnerabilities to gain privileges. Original advisories CVE-2024-38176 CVE-2024-38164 CVE list CVE-2024-38176 high CVE-2024-38164 critical Solution Install necessary updates from the KB section,...

KLA70210 SB vulnerability in Apache HTTP Server

Security bypass vulnerability was found in Apache HTTP Server. Malicious users can exploit this vulnerability to bypass security restrictions. Original advisories Fixed in Apache HTTP Server 2.4.61 Related products Apache-HTTP-Server CVE list CVE-2024-39884 unknown Solution Update to the latest...

KLA70178 ACE vulnerability in Microsoft Dynamics

ACE vulnerability was found in Microsoft Dynamics. Malicious users can exploit this vulnerability to execute arbitrary code. Original advisories CVE-2024-35260 CVE list CVE-2024-35260 critical Solution Install necessary updates from the KB section, that are listed in your Windows Update Windows...

KLA70177 Multiple vulnerabilities in Microsoft Browser

Multiple vulnerabilities were found in Microsoft Browser. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service. Below is a complete list of vulnerabilities: 1. Use after free vulnerability in Dawn can be exploited to cause denial of service or execu...

CVE-2024-5216 Denial of Service in mintplex-labs/anything-llm

A vulnerability in mintplex-labs/anything-llm allows for a Denial of Service DoS condition due to uncontrolled resource consumption. Specifically, the issue arises from the application's failure to limit the size of usernames, enabling attackers to create users with excessively bulky texts in the...

CVE-2024-5216

CVE-2024-5216 affects mintplex-labs/anything-llm. The root cause is the application not limiting the size of usernames, enabling a DoS through denial of service via extremely large username values. Resulting impact is an unresponsive user management panel, preventing admins from editing, suspendi...

KLA70302 Multiple vulnerabilities in Apache Tomcat

Multiple vulnerabilities were found in Apache Tomcat. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. Denial of service vulnerability in excessive HTTP headers when processing an HTTP/2 stream can be exploited to cause...

AEGON LIFE v1.0 Life Insurance Management System - SQL injection vulnerability.

Exploit Title: Life Insurance Management System- SQL injection vulnerability. Exploit Author: Aslam Anwar Mahimkar Date: 18-05-2024 Category: Web application Vendor Homepage: https://projectworlds.in/ Software Link: https://projectworlds.in/life-insurance-management-system-in-php/ Version: AEGON...