PT-2024-10440 · Ibm · Ibm Security Verify Governance

Name of the Vulnerable Software and Affected Versions: IBM Security Verify Governance 10.0.2 Identity Manager Description: The issue is related to the transmission of user credentials in clear text by the Identity Manager component, which could be obtained by an attacker using man-in-the-middle...

Advisory ROSA-SA-2024-2481

Software: java-11-openjdk 11.0.23.0.9 OS: rosa-server79 packageevrstring: java-11-openjdk-11.0.23.0.9-2.res7 CVE-ID: CVE-2024-20918 BDU-ID: 2024-00485 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Hotspot component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM for JDK,...

Advisory ROSA-SA-2024-2480

Software: java-1.8.0-openjdk 1.8.0.412.b08 OS: rosa-server79 packageevrstring: java-1.8.0-openjdk-1.8.0.412.b08-1.res7 CVE-ID: CVE-2024-20918 BDU-ID: 2024-00485 CVE-Crit: HIGH CVE-DESC.: A vulnerability in the Hotspot component of Oracle GraalVM Enterprise Edition virtual machines, Oracle GraalVM...

PT-2025-2846 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android affected versions not specified Description: The issue is related to insufficient protection of service data in Android operating systems. Exploitation of this issue may allow an attacker to disclose protected information...

The vulnerability of the Veeam Reporter Service, a monitoring tool for IT infrastructure, allows a hacker to disclose protected information.

The vulnerability of the Veeam Reporter Service, a monitoring tool for IT infrastructure, is related to insufficient protection of service data. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...

ROS-20240916-03

A vulnerability in the Node.js software platform is related to insufficient data authentication. Exploitation of the vulnerability could allow an attacker acting remotely to disable the validation of the integrity A vulnerability in the APIgenerateKeys function of the Node.js software platform is...

The vulnerability of the Core component of the Oracle VM VirtualBox virtualization software lies in the lack of protection for service data, which allows an intruder to gain unauthorized access to protected information.

The vulnerability of the Core component of the Oracle VM VirtualBox software lies in the lack of protection for service data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform allows a malicious individual to gain unauthorized access to read or modify data.

The vulnerability of the Hotspot component in Oracle GraalVM Enterprise Edition, Oracle GraalVM for JDK, and the Oracle Java SE software platform is related to insufficient protection of service data. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized acce...

ROS-20240829-01

A vulnerability in the Core component of the Oracle VM VirtualBox virtualization software tool is related to resource release errors. resource release errors. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in the Core component of the Oracle V...

PT-2024-7369 · Trueconf · Trueconf Server

Name of the Vulnerable Software and Affected Versions: TrueConf Server affected versions not specified Description: The issue is related to insufficient protection of service data in TrueConf Server. An attacker can exploit this by sending a specially crafted API request to obtain user informatio...

kernel: wifi: cfg80211: check A-MSDU format more carefully

In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80211: check A-MSDU format more carefully If it looks like there's another subframe in the A-MSDU but the header isn't fully there, we can end up reading data out of bounds, only to discard later. Make this a bit more...

PT-2024-5614 · Provision Isr +2 · Sh-8100A-2L +5

Name of the Vulnerable Software and Affected Versions: TVT DVR TD-2104TS-CL affected versions not specified DVR TD-2108TS-HP affected versions not specified Provision-ISR DVR SH-4050A5-5LMM affected versions not specified AVISION DVR AV108T affected versions not specified TD-2116TE-HP affected...

ROS-20240723-03

Vulnerability of Ruby interpreter's Net::FTP class implementation is related to flaws in service data protection using the PASV command. Exploitation of the vulnerability could allow an attacker acting remotely to gain unauthorized access to protected information. remotely, to gain unauthorized...

The vulnerability of the Windows operating system’s network authentication protocol, NT LAN Manager (NTLM), allows attackers to perform spoofing attacks.

The vulnerability of the Windows operating system’s Network Authentication Protocol, NT LAN Manager NTLM, is related to the lack of protection for service data. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of Themes component in Windows operating systems, which allows attackers to carry out spoofing attacks

The vulnerability of Themes Windows themes in Windows operating systems is related to insufficient protection of service data. Exploiting this vulnerability allows a remote attacker to carry out spoofing attacks...

The vulnerability of the Notes component in operating systems iPadOS and iOS, which allows a hacker to disclose sensitive information

The vulnerability of the Notes component in iPadOS and iOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...

The vulnerability of personal assistant Siri in operating systems iPadOS and iOS allows a hacker to disclose protected information.

The vulnerability of the personal assistant Siri in iPadOS and iOS operating systems is related to the lack of protection for service data. Exploiting this vulnerability can allow an attacker to disclose protected information...

PT-2024-5095 · Ibm · Ibm Datacap Navigator

Name of the Vulnerable Software and Affected Versions: IBM Datacap Navigator versions 9.1.5 through 9.1.9 Description: The issue is related to insufficient protection of service data in the source code, allowing an authenticated user to obtain sensitive information that could be used in further...

CVE-2024-6037 Arbitrary Folder Creation in gaizhenbiao/chuanhuchatgpt

A vulnerability in gaizhenbiao/chuanhuchatgpt version 20240410 allows an attacker to create arbitrary folders at any location on the server, including the root directory C: dir. This can lead to uncontrolled resource consumption, resulting in resource exhaustion, denial of service DoS, server...

PT-2024-4969 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows affected versions not specified Description: A spoofing vulnerability affects the system, potentially allowing attackers to perform spoofing attacks due to a lack of protection of service data within the Windows NTLM authentication...