ROS-20240816-10

A vulnerability in the PHP programming language interpreter is related to the erroneous handling of cookies due to the replacement of spaces, dots, and open square brackets with underscores. as a result of replacing spaces, periods and open square brackets with underscores. Exploitation...

PT-2024-7251 · Скуд Gate · Скуд Gate

Name of the Vulnerable Software and Affected Versions: СКУД Gate affected versions not specified Description: The issue is related to the presence of pre-installed credentials in the software. Exploitation of this issue may allow a remote attacker to elevate their privileges within the system and...

The vulnerability of the software for detecting vulnerabilities and errors in PT Application Inspector, related to link processing errors, allows attackers to enhance their privileges and gain unauthorized access to protected information.

The vulnerability of the PT Application Inspector’s software for detecting vulnerabilities and errors is related to errors in link processing. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

The software’s vulnerability lies in the detection of vulnerabilities and errors by PT Application Inspector. This vulnerability arises due to an incorrect limitation on the path to the restricted access directory. This allows attackers to escalate their privileges and gain unauthorized access to protected information.

The vulnerability of the PT Application Inspector software arises due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to enhance their privileges and gain unauthorized access to protected information...

Microsoft Office 2016 Spoofing Vulnerability (KB5002625)

This host is missing an important security update according to Microsoft KB5002625 SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

PT-2024-5699 · Microsoft · Windows Routing/Remote Access Service +1

Name of the Vulnerable Software and Affected Versions: Windows Routing and Remote Access Service RRAS affected versions not specified Description: The issue is related to a buffer overflow in memory, allowing a remote attacker to disclose protected information. There is no information about the...

PT-2024-5628 · Microsoft · Local Security Authority (Lsa) Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft Local Security Authority LSA Server affected versions not specified Description: The issue is related to the use of an uninitialized resource in the Microsoft Local Security Authority LSA Server. Exploitation of this issue may allow...

The vulnerability of the multi-site content management system UMI CMS, related to insufficient protection of operational data, allows a hacker to gain unauthorized access to protected information.

The vulnerability of the multi-site content management system UMI CMS is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

PT-2024-6127

Name of the Vulnerable Software and Affected Versions SAP Shared Service Framework affected versions not specified Description The issue is related to the SAP Shared Service Framework, which does not perform necessary authorization checks for authenticated users. This results in an escalation of...

The configuration of the JetBrains Space module “Project Settings” exposes vulnerabilities. This vulnerability relates to the connections in the system for continuous integration and delivery of applications (CI/CD). The JetBrains TeamCity allows attackers to gain unauthorized access to protected information.

The vulnerability of the JetBrains Space module’s Project Settings | Connections system for continuous integration and delivery of applications is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain...

The vulnerability of the CI/CD system’s continuous integration and delivery capabilities in JetBrains TeamCity, related to deficiencies in the authentication process due to time differences, allows attackers to compromise the confidentiality of the protected information.

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to deficiencies in the authentication process due to time differences when comparing tokens. Exploiting this vulnerability could allow a malicious actor to compromise...

The vulnerability of the CI/CD system’s continuous integration and delivery capabilities in JetBrains TeamCity, related to the disclosure of password values in the log file, allows attackers to gain unauthorized access to protected information.

The vulnerability of the CI/CD application integration and delivery system of JetBrains TeamCity relates to the exposure of password values in the log files. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the drm_file_update_pid() function in the video driver of the Linux operating system allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the drmfileupdatepid function in the drivers/gpu/drm/drmfile.c video driver of the Linux operating system is related to the reutilization of previously freed memory due to competitive access to resources race condition. Exploiting this vulnerability can allow an attacker to...

The vulnerability of the gp_aux_bus_probe() function in Microchip’s Linux-based PCI1XXXX driver allows a hacker to compromise the accessibility of protected information.

The vulnerability of the gpauxbusprobe function in the drivers/misc/mchpPCI1XXXX/ mchpPCI1XXXXgp.c file of the Microchip PCI1XXXX driver for the Linux operating system is related to the re-liberation of previously freed memory. Exploiting this vulnerability could allow an attacker to compromise t...

The vulnerability of the __dwc3_stop_active_transfer() function in the DesignWare USB3 driver for Linux operating systems allows a hacker to compromise the accessibility of protected information.

The vulnerability of the dwc3stopactivetransfer function in the drivers/usb/dwc3/gadget.c file of the DesignWare USB3 driver for the Linux operating system is related to concurrent access to resources race conditions. Exploiting this vulnerability could allow a attacker to compromise the...

The vulnerability of the xlog_do_recovery_pass() function in the file system xfs of the Linux operating system allows a attacker to compromise the accessibility of protected information.

The vulnerability of the xlogdorecoverypass function in the fs/xfs/xfslogrecover.c file of the Linux kernel’s file system xfs is related to access to memory beyond the allocated buffer. Exploiting this vulnerability could allow an attacker to compromise the accessibility of protected information...

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in authentication procedures, allows attackers to gain unauthorized access to protected information.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to deficiencies in the authentication process when handling the final endpoint /api/v1/settings. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in the error reporting mechanism, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to shortcomings in the error reporting mechanism. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the sniff_csv() function in the DuckDB relational database management system allows a hacker to gain unauthorized access to protected information.

The vulnerability of the sniffcsv function in the DuckDB database management system is related to insufficient protection for operational data. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the IBM QRadar SIEM system for event collection and analysis, related to the disclosure of protected information, allows attackers to gain unauthorized access to confidential data.

The vulnerability of the IBM QRadar SIEM event collection and analysis system is related to the disclosure of protected information. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...