Buffer overflow

A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution...

Stack overflow

A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution with SYSTEM privileges...

GitLab Security Breach

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery and other features. A security vulnerability exists in GitLab version 14.0 up to and including...

CVE-2024-23622

CVE-2024-23622 describes a stack-based buffer overflow in IBM Merge Healthcare eFilm Workstation license server, specifically involving the CopySLS_Request3 path. The vulnerability allows remote, unauthenticated attackers to trigger code execution with SYSTEM privileges, over the network. Documen...

CVE-2024-23622 IBM Merge Healthcare eFilm Workstation License Server CopySLS_Request3 Buffer Overflow

A stack-based buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution with SYSTEM privileges...

CVE-2024-23621 IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow

A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution...

CVE-2024-23621

The CVE-2024-23621 entry concerns IBM Merge Healthcare eFilm Workstation license server with a buffer overflow vulnerability. A remote, unauthenticated attacker could exploit this to achieve remote code execution. Documents consistently identify the affected component as the license server compon...

CVE-2024-23621 IBM Merge Healthcare eFilm Workstation License Server Buffer Overflow

A buffer overflow exists in IBM Merge Healthcare eFilm Workstation license server. A remote, unauthenticated attacker can exploit this vulnerability to achieve remote code execution...

CVE-2024-23620

CVE-2024-23620 describes an improper privilege management vulnerability in IBM Merge Healthcare eFilm Workstation. The issue allows a local, authenticated attacker to escalate privileges to SYSTEM, due to faulty privilege handling within the software. Affected product: IBM Merge Healthcare eFilm ...

CVE-2024-23620 IBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation

An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM...

CVE-2024-23620 IBM Merge Healthcare eFilm Workstation SYSTEM Privilege Escalation

An improper privilege management vulnerability exists in IBM Merge Healthcare eFilm Workstation. A local, authenticated attacker can exploit this vulnerability to escalate privileges to SYSTEM...

CVE-2024-23619 IBM Merge Healthcare eFilm Workstation Hardcoded Credentials

A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution...

CVE-2024-23619 IBM Merge Healthcare eFilm Workstation Hardcoded Credentials

A hardcoded credential vulnerability exists in IBM Merge Healthcare eFilm Workstation. A remote, unauthenticated attacker can exploit this vulnerability to achieve information disclosure or remote code execution...

CVE-2024-23619

CVE-2024-23619 affects IBM Merge Healthcare eFilm Workstation. The connected documents identify a hardcoded credential vulnerability as the root cause, allowing a remote, unauthenticated attacker to achieve information disclosure or remote code execution. Affected software is IBM Merge Healthcare...

PT-2024-19977 · Ibm · Ibm Merge Healthcare Efilm Workstation

Name of the Vulnerable Software and Affected Versions: IBM Merge Healthcare eFilm Workstation affected versions not specified Description: A buffer overflow exists in the license server of IBM Merge Healthcare eFilm Workstation. This issue can be exploited by a remote, unauthenticated attacker to...

PT-2024-19978 · Ibm · Ibm Merge Healthcare Efilm Workstation

Name of the Vulnerable Software and Affected Versions: IBM Merge Healthcare eFilm Workstation affected versions not specified Description: A stack-based buffer overflow exists in the license server of IBM Merge Healthcare eFilm Workstation. This issue can be exploited by a remote, unauthenticated...

PT-2024-15575 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 14.0 through 16.6.5 GitLab versions 16.7 through 16.7.3 GitLab versions 16.8 through 16.8.0 Description: An authorization issue exists, allowing an unauthorized attacker to assign arbitrary users to merge requests MRs they...

PT-2024-19976 · Ibm · Ibm Merge Healthcare Efilm Workstation

Name of the Vulnerable Software and Affected Versions: IBM Merge Healthcare eFilm Workstation affected versions not specified Description: An improper privilege management issue exists, allowing a local, authenticated attacker to escalate privileges to SYSTEM. Recommendations: At the moment, ther...

GitLab 14.0 < 16.6.6 / 16.7 < 16.7.4 / 16.8 < 16.8.1 (CVE-2024-0456)

The version of GitLab installed on the remote host is affected by a vulnerability, as follows: - An authorization vulnerability exists in GitLab versions 14.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1. An unauthorized attacker is able to assign arbitrary users to MRs that th...

Cross site request forgery (csrf)

An issue has been discovered in GitLab EE affecting all versions starting from 15.3 before 16.5.6, all versions starting from 16.6 before 16.6.4, all versions starting from 16.7 before 16.7.2. The required CODEOWNERS approval could be bypassed by adding changes to a previously approved merge...