CVE-2023-27279

The vulnerability CVE-2023-27279 affects IBM Aspera Faspex 5.0.0–5.0.7 and is caused by missing API rate limiting, enabling denial of service. Remediation is to upgrade to Faspex 5.0.8 (IBM advisory notes this fix). Impact is rated MEDIUM (CVSS 3.1 base score 6.5); no exploitation details are pro...

CVE-2023-37396

CVE-2023-37396 affects IBM Aspera Faspex 5.0.0–5.0.7, where a local user could obtain sensitive information due to improper encryption of certain data. The issue is documented alongside other encryption vulnerabilities in IBM’s Security Bulletin for Aspera Faspex, which notes that Faspex 5.0.8 ad...

CVE-2024-32650

CVE-2024-32650 affects rustls:complete_io in a blocking rustls server can enter an infinite loop if a client sends close_notify right after client_hello, leading to a denial of service. Fixes exist in rustls releases 0.23.5, 0.22.4, and 0.21.11. Remediation is to upgrade to one of these versions ...

CVE-2023-50260

Wazuh contains a vulnerability in the host_deny active-response script due to improper input validation for IP/JSON handling. An attacker can write arbitrary text into /etc/hosts.deny via the host_deny spawn directive, enabling arbitrary command execution. This can cause local privilege escalatio...

CVE-2024-3470

GitHub Enterprise Server suffers an Improper Privilege Management flaw that lets a repository deploy key bypass an organization’s ruleset when an attacker has a valid deploy key and repository administrator access. Affected versions are 3.11–3.12; remediation is to upgrade to 3.11.8 or 3.12.2. In...

CVE-2023-37400

CVE-2023-37400 affects IBM Aspera Faspex 5.0.0–5.0.7; root cause is insecure credential storage that can enable a local user to escalate privileges. IBM PT/IBM bulletin confirms the fix is available in Faspex 5.0.8. Affected products and versions: Aspera Faspex 5.0.0–5.0.7. Remediation: upgrade t...

CVE-2024-32683

CVE-2024-32683 targets the WP Ultimate Review WordPress plugin. Connected sources describe an unauthenticated bypass via a user-controlled key/ID, enabling direct object reference and potentially bypassing review restrictions in versions up to 2.2.5. Public advisories (RH) label it as an Authoriz...

CVE-2024-2761

Genesis Blocks plugin for WordPress (versions prior to 3.1.3) contains a Stored XSS flaw from improper escaping in certain blocks, exploitable with at least contributor privileges. The issue can be triggered via crafted post content and may affect blocks rendering in frontend/backend. Remediation...

CVE-2024-29963

CVE-2024-29963 affects Brocade SANnav OVA before v2.3.1 and v2.3.0a, where hardcoded TLS keys are used by Docker. Root cause: embedded TLS keys in the appliance enable potential MITM exposure if Docker TLS traffic is reachable; SANnav reportedly does not access remote Docker registries. Impact: c...

CVE-2024-3731

CVE-2024-3731 affects the Customer Reviews for WooCommerce plugin for WordPress. It is a Reflected XSS via the 's' parameter in all versions up to and including 5.47.0, due to insufficient input sanitization and output escaping. This allows unauthenticated attackers to inject web scripts into pag...

CVE-2024-22061

Affected product and component: Ivanti Avalanche, WLInfoRailService. Vulnerability: Heap-based overflow in WLInfoRailService can be exploited remotely by an unauthenticated attacker to execute arbitrary commands. This aligns with CVE-2024-22061 as described across multiple sources in the provided...

CVE-2024-25000

The CVE-2024-25000 entry describes a Path Traversal vulnerability in the Ivanti Avalanche web component prior to version 6.4.3. A remote authenticated attacker can leverage this flaw to execute arbitrary commands as SYSTEM due to improper path validation. Affected product: Ivanti Avalanche (web c...

CVE-2024-23530

Ivanti Avalanche before 6.4.3 is affected by an out-of-bounds read in the WLAvalancheService component, allowing an unauthenticated remote attacker to read sensitive information from memory. Public references (e.g., ZDI-24-375) confirm the flaw in WLAvalancheService and note the vulnerability can...

CVE-2024-24996

Ivanti Avalanche is affected by CVE-2024-24996 due to a heap overflow in the WLInfoRailService component prior to 6.4.3. This allows an unauthenticated, remote attacker to execute arbitrary commands with SYSTEM-level impact (as indicated by sources describing remote code execution and high severi...

CVE-2024-24999

CVE-2024-24999 describes a path traversal flaw in the Ivanti Avalanche web component prior to 6.4.3. The bug enables a remote authenticated attacker to execute arbitrary commands as SYSTEM through improper handling of user-supplied paths in the WLAvalancheService/web component. Affected product: ...

CVE-2024-23535

CVE-2024-23535 describes a path traversal vulnerability in the web component of Ivanti Avalanche prior to 6.4.3. An authenticated remote attacker can exploit an insufficiently restricted pathname in the web component to execute arbitrary commands as SYSTEM. Root cause cited in connected sources i...

CVE-2024-24998

CVE-2024-24998 concerns Ivanti Avalanche. Connected sources confirm a Path Traversal vulnerability in the web component of Ivanti Avalanche, prior to version 6.4.3, which allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. The root cause is improper handling/validation...

CVE-2024-29204

CVE-2024-29204 is a heap overflow in Ivanti Avalanche’s WLAvalancheService before 6.4.3. The issue allows a remote unauthenticated attacker to execute arbitrary commands. Connected sources confirm the affected product (Ivanti Avalanche) and component (WLAvalancheService) with a user-initiated con...

CVE-2024-23533

CVE-2024-23533 describes an out-of-bounds read in Ivanti Avalanche’s WLAvalancheService, affecting versions prior to 6.4.3. An authenticated remote attacker could read sensitive information from memory under certain conditions. The linked documents confirm the vulnerable component and version bou...

CVE-2023-49502

CVE-2023-49502 corresponds to a buffer overflow in FFmpeg (ff_bwdif_filter_intra_c in libavfilter/bwdifdsp.c:125:5) that could allow a local attacker to execute arbitrary code. The affected component is FFmpeg v.n6.1-3-g466799d4f5. Connected advisories confirm this vulnerability and indicate mult...