CVE-2024-10809

CVE-2024-10809 impacts the Code-Projects E-Health Care System v1.0. The vulnerability lies in the web endpoint /Doctor/chat.php, where manipulating the parameters name (and by indication, also message ) enables an SQL injection. This remote-access issue is described across multiple sources (NVD, ...

kernel: netfilter: bridge: replace physindev with physinif in nf_bridge_info

CVE-2024-35839 is a flaw in the Linux kernel's Netfilter bridge functionality. It occurs when bridging certain packets, such as those involving destination NAT between virtual Ethernet interfaces. A mismatch between the network device associated with a packet and the neighbor's device can lead to...

Unspecified Vulnerability in IBM TXSeries for Multiplatforms (CNVD-2024-43182)

IBM TXSeries for Multiplatforms is a transaction monitoring and management software product from International Business Machines IBM designed to support distributed transaction processing on multiple platforms. A security vulnerability exists in IBM TXSeries for Multiplatforms version 10.1, which...

PT-2024-33199 · Microsoft · Power Bi

Name of the Vulnerable Software and Affected Versions: Power BI version 4.0.0.3 Description: An issue in Lens Visual integration with Power BI allows a remote attacker to execute arbitrary code via the Natural language processing component. Recommendations: For Power BI version 4.0.0.3, consider...

CVE-2024-48746

CVE-2024-48746 affects Lens Visual integration with Power BI v4.0.0.3. The issue allows a remote attacker to execute arbitrary code via the Natural Language Processing component. The vulnerability is described across multiple sources (NVD/Red Hat/CNNVD) with a high impact and CVSS v3.1 base score...

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

CVE-2024-48746

An issue in Lens Visual integration with Power BI v.4.0.0.3 allows a remote attacker to execute arbitrary code via the Natural language processing component...

Lens Visual integration with Power BI 安全漏洞

Lens Visual integration with Power BI is a program from Lens Visual, Inc. Enhances Power BI dashboards with OpenAI and ChatGPT. A security vulnerability exists in Lens Visual integration with Power BI version v.4.0.0.3, which originates from a vulnerability that could allow a remote attacker to...

PT-2024-34686 · Unknown · Device Management Module

Name of the Vulnerable Software and Affected Versions: Device Management Module affected versions not specified Description: The issue is related to improper device information processing in the device management module. Successful exploitation of this issue may affect system availability...

CVE-2024-45086

IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to an XML external entity injection XXE attack when processing XML data. A privileged user could exploit this vulnerability to expose sensitive information or consume memory resources...

Important: Red Hat Security Advisory: openexr security update

An update for openexr is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-33033

Memory corruption while processing IOCTL calls to unmap the buffers...

CVE-2024-38405

Transient DOS while processing the CU information from RNR IE...

CVE-2024-38421

CVE-2024-38421 corresponds to a memory corruption vulnerability in Qualcomm GPU command processing. The issue affects Qualcomm GPU/Display-related components and is described as “Memory corruption while processing GPU commands.” The CVE entry lists a high impact with CVSS 3.1 metrics indicating l...

CVE-2024-38405 Buffer Over-read in WLAN Host

Transient DOS while processing the CU information from RNR IE...

CVE-2024-38405

CVE-2024-38405 is a Qualcomm WLAN component vulnerability causing a transient denial-of-service when processing the CU information from the RNR IE. The issue is documented with a high impact in Qualcomm’s security context and is indicated in accompanying Android bulletins as part of patch levels ...

CVE-2024-33031

CVE-2024-33031 concerns memory corruption in Qualcomm chipsets, attributed to the Radio Interface Layer (RIL) when processing the update SIM PB records request. The CVE is described as an improper input validation bug in RIL, with a CVSSv3.1 base score of 6.7 (Medium). The impact is listed as hig...

IBM WebSphere Application Server 安全漏洞

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. A security vulnerability exists in IBM WebSphere...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that originates from a memory corruption when processing PDRs in the driver to obtain a remote heap map...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm, Inc. A security vulnerability exists in Qualcomm Chipsets that stems from a memory corruption when handling GPU page table switches...