CVE-2024-27126

CVE-2024-27126 affects QNAP Notes Station 3 with a cross‑site scripting (XSS) vulnerability. The issue could allow authenticated users to inject malicious code over the network. Affected versions are prior to 3.9.6; remediation is to upgrade to Notes Station 3 version 3.9.6 or later. The CVE entr...

CVE-2024-27122

CVE-2024-27122 affects QNAP Notes Station 3. The vulnerability is a cross-site scripting (XSS) flaw that could allow authenticated users to inject malicious code via the network. Affected versions: Notes Station 3 prior to 3.9.6. Mitigation: upgrade to Notes Station 3 version 3.9.6 or later, whic...

CVE-2024-27122 Notes Station 3

A cross-site scripting XSS vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network. We have already fixed the vulnerability in the following versions: Notes Station 3 3.9.6 and later...

QNAP Notes Station 安全漏洞

QNAP Systems QNAP Notes Station is a note-taking application from China Weilian Technology QNAP Systems. It allows users to create, edit and synchronize notes on QNAP NAS devices. The application is often tightly integrated with QNAP's NAS systems, providing users with a convenient way to record...

PT-2024-21661 · Unknown · Notes Station 3

Name of the Vulnerable Software and Affected Versions: Notes Station 3 versions prior to 3.9.6 Description: A cross-site scripting XSS vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network...

QNAP Notes Station 跨站脚本漏洞

QNAP Systems QNAP Notes Station is a note-taking application from China Weilian Technology QNAP Systems. It allows users to create, edit and synchronize notes on QNAP NAS devices. The application is often tightly integrated with QNAP's NAS systems, providing users with a convenient way to record...

PT-2024-21664 · Unknown · Notes Station 3

Name of the Vulnerable Software and Affected Versions: Notes Station 3 versions prior to 3.9.6 Description: A cross-site scripting XSS vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow authenticated users to inject malicious code via a network...

RHEL 7 : flatpak (RHSA-2024:6417)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:6417 advisory. Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. Security Fixes: flatpak: Access to files outside...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.13.49 bug fix and security update

Red Hat OpenShift Container Platform release 4.13.49 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.13. Red Hat Product Security has rated this update as having a...

CVE-2024-34657

Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code...

CVE-2024-34660

Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code...

CVE-2024-34660

Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code...

CVE-2024-34658

Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR...

CVE-2024-34657

Stack-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows remote attackers to execute arbitrary code...

CVE-2024-34658

Out-of-bounds read in Samsung Notes allows local attackers to bypass ASLR...

CVE-2024-34656

Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code...

CVE-2024-34656

Path traversal in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code...

CVE-2024-34660

Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code...

CVE-2024-34660

Heap-based out-of-bounds write in Samsung Notes prior to version 4.4.21.62 allows local attackers to execute arbitrary code...

CVE-2024-34660

Samsung Notes contains a heap-based out-of-bounds write vulnerability in versions prior to 4.4.21.62, enabling a local attacker with low privileges to potentially execute arbitrary code on the affected device. The issue is confirmed across multiple sources; the impact is described as arbitrary co...