PT-2024-39719 · Mailmunch · Constant Contact Forms By Mailmunch

Name of the Vulnerable Software and Affected Versions: Constant Contact Forms by MailMunch plugin for WordPress versions up to, and including, 2.1.2 Description: The issue arises from the use of add query arg without proper escaping on the URL, allowing unauthenticated attackers to inject arbitra...

Brocade Fabric OS - Security Update - Lenovo Support US

No description provided...

NVIDIA GPU Display Driver - October 2024 - Lenovo Support US

No description provided...

CVE-2024-50386 Apache CloudStack: Directly downloaded templates can be used to abuse KVM-based infrastructure

Account users in Apache CloudStack by default are allowed to register templates to be downloaded directly to the primary storage for deploying instances. Due to missing validation checks for KVM-compatible templates in CloudStack 4.0.0 through 4.18.2.4 and 4.19.0.0 through 4.19.1.2, an attacker...

PT-2025-11336 · Unknown +4 · Ghostscript +4

Name of the Vulnerable Software and Affected Versions: Debian Linux affected versions not specified ghostscript affected versions not specified Description: The issue concerns a text buffer overflow with long characters in the DOCXWRITE and TXTWRITE devices. Recommendations: For Debian Linux,...

JAM STAPL Player Software Advisory

This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01151.html...

Intel® Granulate™ Software Advisory

Summary: A potential security vulnerability in some Intel® Granulate™ software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-27200 Description: Improper access control in some Intel® Granulat...

Intel® IPP Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Intel® IPP software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28952 Description: Uncontrolled...

Siemens SIPORT

SUMMARY SIPORT before V3.4.0 contains a privilege escalation vulnerability which could allow a local attacker with an unprivileged account to override or modify the service executable and subsequently gain elevated privileges. Siemens has released a new version for SIPORT and recommends to...

PT-2024-9209 · Apache +1 · Apache Traffic Server +1

Name of the Vulnerable Software and Affected Versions: Apache Traffic Server versions 8.0.0 through 8.1.11 Apache Traffic Server versions 9.0.0 through 9.2.5 Description: The issue is related to improper input validation, which can allow a remote attacker to implement a cache poisoning attack. Th...

Siemens SINEC NMS

SUMMARY SINEC NMS before V3.0 SP1 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC NMS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network access to devices...

Siemens SINEC INS

SUMMARY SINEC INS before V1.0 SP2 Update 3 is affected by multiple vulnerabilities. Siemens has released a new version for SINEC INS and recommends to update to the latest version. 2. GENERAL RECOMMENDATIONS As a general security measure, Siemens strongly recommends to protect network access to...

Security Bulletin: Security vulnerability due to Apache Derby package shipped with IBM CICS TX Standard

Summary Security vulnerability due to Apache Derby package shipped with IBM CICS TX Standard. The Apache Derby package version has been updated. Vulnerability Details CVEID:CVE-2022-46337 DESCRIPTION: Apache Derby could allow a remote attacker to bypass security restrictions, caused by a LDAP...

PT-2024-20849 · Superscan · Superscan

Name of the Vulnerable Software and Affected Versions: SuperScan version 4.1 Description: A buffer overflow issue was discovered in SuperScan, which occurs via the Hostname/IP parameter. This issue grants an attacker full control. Recommendations: For SuperScan version 4.1, patch immediately and...

PT-2024-16460 · WordPress · Contact Form 7 Redirect & Thank You Page

Name of the Vulnerable Software and Affected Versions: Contact Form 7 Redirect & Thank You Page plugin for WordPress versions up to, and including, 1.0.6 Description: The issue is related to Reflected Cross-Site Scripting via the tab parameter due to insufficient input sanitization and output...

PT-2024-8688 · Apache +1 · Apache Tomcat +1

Name of the Vulnerable Software and Affected Versions: Apache Tomcat versions 9.0.96 through 11.0.0 Apache Tomcat version 10.1.31 Description: The issue is related to incorrect object recycling and reuse in Apache Tomcat, which can lead to a cross-site scripting XSS attack. This occurs because...

Debian dsa-5811 : libmpg123-0 - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5811 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5811-1 [email protected] https://www.debian.org/security/...

Debian dsa-5808 : ghostscript - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5808 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5808-1 [email protected] https://www.debian.org/securit...

PT-2024-16639 · Eclipse +2 · Eclipse Openj9 +2

Name of the Vulnerable Software and Affected Versions: Eclipse OpenJ9 versions up to 0.47 Description: The JNI function GetStringUTFLength may return an incorrect value which has wrapped around. From version 0.48, the value is correct but may be truncated to include a smaller number of characters...

PT-2024-28101 · Ivanti · Ivanti Connect Secure

Name of the Vulnerable Software and Affected Versions: Ivanti Connect Secure versions prior to 22.7R2.1 Description: The issue is an out-of-bounds write in IPsec that allows a remote unauthenticated attacker to cause a denial of service. Recommendations: For versions prior to 22.7R2.1, update to...