PT-2024-2743 · Siemens · Simatic Route Control +5

Name of the Vulnerable Software and Affected Versions: OpenPCS 7 versions prior to V9.1 SP2 UC05 SIMATIC BATCH versions prior to V9.1 SP2 UC05 SIMATIC PCS 7 versions prior to V9.1 SP2 UC05 SIMATIC Route Control versions prior to V9.1 SP2 UC05 SIMATIC WinCC Runtime Professional V18 versions prior ...

PT-2024-2755 · Siemens · Simatic Route Control +5

Name of the Vulnerable Software and Affected Versions: OpenPCS 7 versions prior to V9.1 SP2 UC05 SIMATIC BATCH versions prior to V9.1 SP2 UC05 SIMATIC PCS 7 versions prior to V9.1 SP2 UC05 SIMATIC Route Control versions prior to V9.1 SP2 UC05 SIMATIC WinCC Runtime Professional version V18 through...

GHSA-37VR-VMG4-JWPW Apache Solr: Backup/Restore APIs allow for deployment of executables in malicious ConfigSets

Improper Control of Dynamically-Managed Code Resources, Unrestricted Upload of File with Dangerous Type, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Solr.This issue affects Apache Solr from 6.0.0 through 8.11.2, from 9.0.0 before 9.4.1. In the affected version...

PT-2024-20737 · Binisoft +1 · Windows Firewall Control +1

Name of the Vulnerable Software and Affected Versions: Malwarebytes Binisoft Windows Firewall Control versions prior to 6.9.9.2 Description: The issue allows remote attackers to execute arbitrary code via gRPC named pipes. This enables attackers to potentially gain control over affected systems...

Malwarebytes Binisoft Windows Firewall Control Security Vulnerability

Malwarebytes Binisoft Windows Firewall Control is a third-party tool from Malwarebytes for enhancing Windows Firewall functionality by providing users with more advanced firewall control options. A security vulnerability previously existed in Malwarebytes Binisoft Windows Firewall Control version...

A Self-Enforcing Protocol to Solve Gerrymandering

In 2009, I wrote: There are several ways two people can divide a piece of cake in half. One way is to find someone impartial to do it for them. This works, but it requires another person. Another way is for one person to divide the piece, and the other person to complain to the police, a judge, o...

samba: type confusion in mdssvc RPC service for spotlight

A Type Confusion vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets, one encoded data structure is a key-value style dictionary where the keys are character strings, and the values can be any of the supported types in the mdssvc protocol...

samba: spotlight server-side share path disclosure

A path disclosure vulnerability was found in Samba. As part of the Spotlight protocol, Samba discloses the server-side absolute path of shares, files, and directories in the results for search queries. This flaw allows a malicious client or an attacker with a targeted RPC request to view the...

samba: infinite loop in mdssvc RPC service for spotlight

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like...

CVE-2023-6943

Use of Externally-Controlled Input to Select Classes or Code 'Unsafe Reflection' vulnerability in Mitsubishi Electric Corporation EZSocket versions 3.0 to 5.92, GT Designer3 Version1GOT1000 versions 1.325P and prior, GT Designer3 Version1GOT2000 versions 1.320J and prior, GX Works2 versions 1.11M...

Various Mitsubishi Electric products Security breach

Mitsubishi Electric FR Configurator2 and others are products of Mitsubishi Electric, Japan.Mitsubishi Electric FR Configurator2 is an inverter drive configuration application.Mitsubishi Electric GT Designer3 is an inverter interface programming software. Mitsubishi Electric GT Designer3 is a HMI...

samba: infinite loop in mdssvc RPC service for spotlight

An infinite loop vulnerability was found in Samba's mdssvc RPC service for Spotlight. When parsing Spotlight mdssvc RPC packets sent by the client, the core unmarshalling function slunpackloop did not validate a field in the network packet that contains the count of elements in an array-like...

MAL-2024-326 Malicious code in wlwz-2312-1703 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 60fc698b8eb86bd687071d7fc2c861c833040913741682ac2fc0b6e1c5c61101 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

RHCOS 4 : OpenShift Container Platform 4.12.9 (RHSA-2023:1408)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1408 advisory. - capnproto: out of bounds read when handling a list of lists. CVE-2022-46149 Note that Nessus has not tested for this issue but has instead...

opentelemetry-go-contrib: DoS vulnerability in otelgrpc due to unbound cardinality metrics

A memory exhaustion flaw was found in the otelgrpc handler of open-telemetry. This flaw may allow a remote unauthenticated attacker to flood the peer address and port and exhaust the server's memory by sending multiple malicious requests, affecting the availability of the system...

VulnCheck KEV: CVE-2023-34048

VMware vCenter Server contains an out-of-bounds write vulnerability in the implementation of the DCERPC protocol that allows an attacker to conduct remote code execution...

The vulnerability of the Slurm resource manager lies in the insufficient implementation of message integrity during transmission to the communication channel. This allows attackers to modify RPC traffic in a way that bypasses message hash checks.

The vulnerability of the Slurm resource manager is related to the insufficient implementation of message integrity during transmission through the communication channel. Exploiting this vulnerability allows a malicious actor to modify RPC traffic in such a way that message checksums are bypassed...

PT-2024-1116 · Juniper Networks · Junos Evolved +1

Name of the Vulnerable Software and Affected Versions: Juniper Networks Junos OS versions prior to 22.2R2-S2, 22.2R3 Juniper Networks Junos OS versions prior to 22.3R2, 22.3R3 Juniper Networks Junos OS Evolved versions prior to 22.2R2-S2-EVO, 22.2R3-EVO Juniper Networks Junos OS Evolved versions...

DDC 2203 - How to manually remove the stale DDC from Database

Old removed DDC is listed under Zones alongside the two current DDCs. "Get-BrokerController" and database table 'chbConfig.Controllers' shows working DDCs...

UBUNTU-CVE-2023-47992

An integer overflow vulnerability in FreeImageIO.cpp::MemoryReadProc in FreeImage 3.18.0 allows attackers to obtain sensitive information, cause a denial-of-service attacks and/or run arbitrary code...