PT-2024-30985 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: A permissions issue was addressed with additional restrictions, which may have allowed an app to access protected user data. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to...

PT-2024-30972 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: The issue allows an app with root privileges to potentially access private information due to inadequate data protection. This has been addressed with improved data protection measures. Recommendations:...

PT-2024-29100 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 15 Description: The issue allows an app to modify protected parts of the file system. It was addressed with improved checks. Recommendations: For versions prior to 15, update to macOS Sequoia 15 to resolve the issue...

The vulnerability of the swpm component in the “Avora” operating system, related to the ability to read beyond the buffer limit of memory, allows a hacker to cause a failure in the execution of the program.

The vulnerability of the software power management component in the “Avora” operating system is related to the ability to read data beyond the buffer limit of memory. Exploiting this vulnerability can lead to service failure...

The vulnerability of the MHTML export function in the Spreadsheet module of the WPS Office office software for Windows operating systems allows a malicious individual to perform arbitrary commands.

The vulnerability of the MHTML export function in the Spreadsheet module of the WPS Office office software on Windows operating systems is related to the loading of malicious DLL libraries due to an incorrect limitation on the path to the ksoqing directory. Exploiting this vulnerability allows a...

The vulnerability of the validation component of the Aurora operating system, related to the lack of control over public rights to write the installed application files, allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the validation component of the “Aurora” operating system is related to the lack of control over public rights to write the files that are installed by applications. Exploiting this vulnerability can lead to violations of data confidentiality, integrity, and accessibility...

The vulnerability of Zyxel network devices’ microprogramming software arises from the lack of measures taken to neutralize special elements used in the operating system commands. This allows attackers to execute arbitrary commands.

The vulnerability of Zyxel network devices’ microprogramming software exists due to the lack of measures taken to neutralize the special elements used in the operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

The vulnerability of the `bnx2fc_recv_frame` function in the SCIS component of the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the bnx2fcrecvframe function in the scsi component of the Linux operating system is related to buffer overflow in the stack. Exploiting this vulnerability could allow an attacker to cause a service failure...

QNX Qconn Command Execution Exploit

This Metasploit module uses the qconn daemon on QNX systems to gain a shell. The QNX qconn daemon does not require authentication and allows remote users to execute arbitrary operating system commands. This Metasploit module has been tested successfully on QNX Neutrino 6.5.0 x86 and 6.5.0 SP1 x86...

VulnCheck KEV: CVE-2024-8190

Ivanti Cloud Services Appliance CSA contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS...

Unspecified vulnerability in Linux kernel (CNVD-2024-39519)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a problematic initialization of the netfilter:flowtable component. No details of the vulnerability are...

Moderate Photon OS Security Update - PHSA-2024-5.0-91-0376

Updates of 'linux', 'linux-rt' packages of Photon OS have been released...

The vulnerability of the command-line interface of the Cisco NX-OS operating system in Cisco Nexus switches allows a perpetrator to execute arbitrary commands.

The vulnerability of the command-line interface of the Cisco NX-OS operating system in Cisco Nexus switches exists due to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability can allow an attacker to execute arbitrary commands on the basic operating system...

The vulnerability of the Cisco NX-OS operating system in Cisco Nexus switches allows a perpetrator to execute arbitrary code.

The vulnerability of the Cisco NX-OS operating system in Cisco Nexus switches is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to execute arbitrary code in the root context...

The vulnerability of the DRM/AMD/display components in the Linux operating system, related to pointer dereferencing errors, allows a violator to trigger a service failure.

The vulnerability of the DRM/amd/display components in the Linux operating system is related to pointer assignment errors. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the Shadow Mode component of the cross-platform Xen hypervisor in Linux operating systems arises from insufficient validation of input data, allowing attackers to exploit their privileges.

The vulnerability of the Shadow Mode component of the cross-platform hypervisor Xen in the Linux operating system is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Important Photon OS Security Update - PHSA-2024-5.0-91-0374

Updates of 'linux', 'linux-esx', 'linux-rt' packages of Photon OS have been released...

The vulnerability of the audit plugin (of the TracePluginImpl class in the TracePluginImpl module) of the “Red Database” database management system allows a perpetrator to influence audit records.

The vulnerability of the audit plugin of the TracePluginImpl class within the TracePluginImpl module of the “Red Database” database management system relates to the possibility of assigning incorrect severity and facility parameters to certain events when these events are recorded in the OS syslo...

CVE-2024-20343

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the file system of the underlying Linux operating system. The attacker must have valid credentials on the affected device. This vulnerability is due to incorrect validation of the...

CVE-2024-20343 Cisco IOS XR Software CLI Arbitrary File Read Vulnerability

A vulnerability in the CLI of Cisco IOS XR Software could allow an authenticated, local attacker to read any file in the file system of the underlying Linux operating system. The attacker must have valid credentials on the affected device. This vulnerability is due to incorrect validation of the...