PT-2024-31538 · Sap · Sap Gui

Name of the Vulnerable Software and Affected Versions: SAP GUI affected versions not specified Description: The issue allows a low-privileged user to perform a denial of service on any user and also change or delete favourite nodes. This is achieved by sending a crafted packet in the function...

CVE-2024-8443

A heap-based buffer overflow vulnerability was found in the libopensc OpenPGP driver. A crafted USB device or smart card with malicious responses to the APDUs during the card enrollment process using the pkcs15-init tool may lead to out-of-bound rights, possibly resulting in arbitrary code...

CVE-2024-32771

An improper restriction of excessive authentication attempts vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local network authenticated administrators to perform an arbitrary number of authentication attempts via...

CVE-2023-39298

A missing authorization vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow local authenticated users to access data or perform actions that they should not be allowed to perform via unspecified vectors. QuTScloud, is not...

CVE-2023-34974

An OS command injection vulnerability has been reported to affect several QNAP operating system versions. If exploited, the vulnerability could allow users to execute commands via a network. QuTScloud, QVR, QES are not affected. We have already fixed the vulnerability in the following versions: Q...

CVE-2024-45726

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45724

REJECT DO NOT USE THIS CANDIDATE NUMBER. The CVE was never used...

CVE-2024-45157

CVE-2024-45157 affects Mbed TLS releases prior to 2.28.9 and 3.x prior to 3.6.1, where the user-selected algorithm is not honored. Specifically, enabling MBEDTLS_PSA_HMAC_DRBG_MD_TYPE does not switch PSA to HMAC_DRBG; HMAC_DRBG is used only when MBEDTLS_PSA_CRYPTO_EXTERNAL_RNG and MBEDTLS_CTR_DRB...

CVE-2024-44973 mm, slub: do not call do_slab_free for kfence object

In the Linux kernel, the following vulnerability has been resolved: mm, slub: do not call doslabfree for kfence object In 782f8906f805 the freeing of kfence objects was moved from deep inside doslabfree to the wrapper functions outside. This is a nice change, but unfortunately it missed one spot ...

Malicious code in saptiya (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3e761bb75d4a0bad96ad666c358c5b3eccdc0f47e5e6622a536496b9ee2fa49b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-6020

The Sign-up Sheets WordPress plugin before 2.2.13 does not escape some generated URLs, as well as the $SERVER'REQUESTURI' parameter before outputting them back in attributes, which could lead to Reflected Cross-Site Scripting...

CVE-2024-45445

Vulnerability of resources not being closed or released in the keystore module Impact: Successful exploitation of this vulnerability will affect availability...

PT-2024-40932 · Strason · Strason

Name of the Vulnerable Software and Affected Versions: strason affected versions not specified Description: The strason project has been archived by its developer and will no longer be maintained. Recommendations: At the moment, there is no information about a newer version that contains a fix fo...

PT-2024-40928 · Hwloc · Hwloc

Name of the Vulnerable Software and Affected Versions: hwloc affected versions not specified Description: The hwloc project has been archived by its developer and will no longer be maintained. This decision was made without any issues being reported. Recommendations: At the moment, there is no...

PT-2024-6629 · Loway · Loway Queuemetrics

Name of the Vulnerable Software and Affected Versions: Loway QueueMetrics affected versions not specified Description: The issue is related to a URL redirection to an untrusted site, also known as an 'Open Redirect'. This occurs when loading the login page, allowing a remote attacker to redirect ...

CVE-2024-45618

A vulnerability was found in pkcs15-init in OpenSC. An attacker could use a crafted USB Device or Smart Card, which would present the system with a specially crafted response to APDUs. Insufficient or missing checking of return values of functions leads to unexpected work with variables that have...

Malicious code in @diotoborg/ipsum-eaque-quidem (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2826ee2f1ef22077ab36d58839efffbd7c067fdbebe5817edf98729d4a962381 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/vero-quaerat (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 6c5d803035d0708d3e5097f172dcffec0e8fd9dcf7cf966310d86bc14fcc8357 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in @diotoborg/odit-nostrum-consequuntur (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 0b79af22057a217f7d07d6a60acfedb940eb264d800aa6c7c1b12c135bf2e8f7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8594 Malicious code in @diotoborg/recusandae-non (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware babd548939ccd4276e2983abadb6053226cb0a7eccf7fc2bef8cc2ba65a73073 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...