BELL-CVE-2024-7730

Bulletin has no description...

Adobe Substance 3D Sampler 缓冲区错误漏洞

Adobe Substance 3D Sampler is a photogrammetry software from the American company Audobee Adobe. It is used to convert photo captures and scanned images into 3D textures and material assets. An out-of-bounds read vulnerability exists in Adobe Substance 3D Sampler version 4.5 and earlier versions,...

Intel Connectivity Performance Suite Software Installer Advisory - Lenovo Support US

No description provided...

Intel HID Event Filter Software Installer Advisory - Lenovo Support US

No description provided...

CGA-PXPW-M7V2-62FQ

Bulletin has no description...

Intel® IPP Software Advisory

Summary: A potential security vulnerability in some Intel® Integrated Performance Primitives Intel® IPP software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-28887 Description: Uncontrolled...

BMRA Software Advisory

Summary: A potential security vulnerability in some Bare Metal Reference System Architecture BMRA software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21787 Description: Inadequate encrypti...

CVE-2023-41884

ZoneMinder is a free, open source Closed-circuit television software application. In WWW/AJAX/watch.php, Line: 51 takes a few parameter in sql query without sanitizing it which makes it vulnerable to sql injection. This vulnerability is fixed in 1.36.34...

CVE-2024-42478 llama.cpp allows Arbitrary Address Read in rpc_server::get_tensor

llama.cpp provides LLM inference in C/C++. The unsafe data pointer member in the rpctensor structure can cause arbitrary address reading. This vulnerability is fixed in b3561...

CVE-2024-22121

A non-admin user can change or remove important features within the Zabbix Agent application, thus impacting the integrity and availability of the application...

PT-2024-37956

Name of the Vulnerable Software and Affected Versions Veribase Order Management versions prior to v4.010.2 Description The issue is related to an OS Command Injection vulnerability, which allows unauthorized access due to improper neutralization of special elements used in an OS command. This...

The vulnerability of the multi-site content management system UMI CMS, related to the possibility of bypassing authentication, allows a hacker to circumvent the account activation process.

The vulnerability of the multi-site content management system UMI CMS is related to the possibility of bypassing authentication. Exploiting this vulnerability allows a malicious actor to circumvent the account activation process...

BELL-CVE-2024-42252

Bulletin has no description...

BELL-CVE-2024-42253

Bulletin has no description...

CVE-2024-36462

Technical details about CVE-2024-36462 are not publicly provided in the connected documents. The sources describe generic uncontrolled resource consumption and DoS impact; no affected product/version or patch info is specified. Monitor for updates.

BELL-CVE-2024-42248

Bulletin has no description...

OSV-2024-732 Security exception in com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$19

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=71009 Crash type: Security exception Crash state: com.github.javaparser.ast.visitor.VoidVisitorAdapter.lambda$visit$19 java.base/java.util.ArrayList.forEach com.github.javaparser.ast.NodeList.forEach...

CVE-2024-39791

CVE-2024-39791 affects Vonets Industrial WiFi Bridge Relays and WiFi Bridge Repeaters, firmware versions 3.3.23.6.9 and earlier. The vulnerability is a stack-based buffer overflow in the device software that allows an unauthenticated remote attacker to execute arbitrary code . Public sources cons...

PYSEC-2024-200

JupyterHub is software that allows one to create a multi-user server for Jupyter notebooks. Prior to versions 4.1.6 and 5.1.0, if a user is granted the admin:users scope, they may escalate their own privileges by making themselves a full admin user. The impact is relatively small in that...

PT-2024-28873 · Unknown · Kashipara Live Membership System

Name of the Vulnerable Software and Affected Versions: Kashipara Live Membership System version 1.0 Description: A Cross-Site Request Forgery CSRF issue was found in the Kashipara Live Membership System. This could lead to an attacker tricking the administrator into deleting valid member data via...