12585 matches found
PT-2024-5813 Ā· GoogleĀ +3 Ā· Google ChromeĀ +3
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the Installer component, allowing a local attacker to perform privilege escalati...
PT-2024-5906 Ā· GoogleĀ +5 Ā· Google ChromeĀ +5
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 128.0.6613.84 Microsoft Edge affected versions not specified Description: The issue is related to an inappropriate implementation in Views, allowing a remote attacker to perform UI spoofing via a crafted HTML...
PT-2024-7833 Ā· Esri Ā· Esri Portal For Arcgis
Name of the Vulnerable Software and Affected Versions: Esri Portal for ArcGIS versions 10.8.1 through 11.1 Description: The issue is related to a reflected XSS vulnerability that may allow a remote, unauthenticated attacker to create a crafted link which, when clicked, could potentially execute...
A vulnerability in TOYOTA MOTOR's DCU (Display Control Unit)
Overview TOYOTA MOTOR's DCU contains a vulnerability which is triggered by BlueBorne vulnerability. TOYOTA MOTER CORPORATION reported this vulnerability to JPCERT/CC to notify users of its solution through JVN. Impact An unauthenticated attacker may cause a denial of service DoS condition or...
Security Bulletin: IBM Maximo Application Suite - AI Broker component uses tomcat-embed-core-10.1.20.jar which is vulnerable to this CVE-2024-34750
Summary IBM Maximo Application Suite - AI Broker Component includestomcat-embed-core-10.1.20.jar which is vulnerable to this CVE-2024-34750. This bulletin contains information regarding the vulnerability and its fixture. Vulnerability Details CVEID:CVE-2024-34750 DESCRIPTION: Apache Tomcat is...
PT-2024-30566 Ā· Ghost Ā· Ghost
Name of the Vulnerable Software and Affected Versions: Ghost versions 4.46.0 through 5.89.4 Description: The issue is related to improper authentication on some endpoints used for member actions, allowing an attacker to perform member-only actions and read member information. Recommendations: For...
ALSA-2024:5532 Important: python3.11-setuptools security update
Setuptools is a collection of enhancements to the Python 3 distutils that allow you to more easily build and distribute Python 3 packages, especially ones that have dependencies on other packages. This package also contains the runtime components of setuptools, necessary to execute the software...
Moderate Photon OS Security Update - PHSA-2024-5.0-91-0350
Updates of 'nginx' packages of Photon OS have been released...
PT-2024-6810 Ā· GoogleĀ +2 Ā· Google ChromeĀ +2
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.58 Microsoft Edge affected versions not specified Description: The issue is related to insufficient data validation in the Omnibox feature of Google Chrome and Microsoft Edge browsers. This could all...
PT-2024-30402 Ā· Unknown Ā· Masteriyo - Lms
Name of the Vulnerable Software and Affected Versions: Masteriyo - LMS versions 1.11.4 and earlier Description: The issue is related to an Authorization Bypass Through User-Controlled Key vulnerability. This allows for unauthorized access. The estimated number of potentially affected devices is n...
PT-2024-37898 Ā· WordPress Ā· Chatbot With Chatgpt
Name of the Vulnerable Software and Affected Versions: The Chatbot with ChatGPT WordPress plugin versions prior to 2.4.5 Description: The issue concerns the lack of sanitization and escaping of user inputs, which could allow unauthenticated users to perform Stored Cross-Site Scripting attacks...
PT-2024-29960 Ā· Unknown Ā· Upkeeper Manager
Name of the Vulnerable Software and Affected Versions: upKeeper Manager versions through 5.1.9 Description: An Authorization Bypass Through User-Controlled Key issue exists in upKeeper Manager, allowing an attacker to utilize REST's trust in the system resource to obtain sensitive data...
PT-2024-37643 Ā· WordPress Ā· The News Element Elementor Blog Magazine Wordpress Plugin
Name of the Vulnerable Software and Affected Versions: The News Element Elementor Blog Magazine WordPress plugin versions prior to 1.0.6 Description: The issue allows an unauthenticated attacker to include and execute PHP files on the server via the template parameter, enabling the execution of a...
CGA-G77R-CRQM-JQV5
Bulletin has no description...
PT-2024-37238 Ā· Palo Alto Networks Ā· Pan-Os
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks PAN-OS versions prior to 10.2.8 Palo Alto Networks PAN-OS versions prior to 11.0.4 Description: An information exposure issue in the software enables a local system administrator to unintentionally disclose secrets,...
PT-2024-5858
Name of the Vulnerable Software and Affected Versions NGINX Open Source and NGINX Plus versions prior to 1.26.2 NGINX Open Source and NGINX Plus versions prior to 1.27.1 Description The issue is related to a buffer overread vulnerability in the ngx http mp4 module, which might allow an attacker t...
Intel Arc and Xe Graphics Software Advisory - Lenovo Support US
No description provided...
CGA-V98J-MCMH-G897
Bulletin has no description...
Description of the security update for Project 2016: August 13, 2024 (KB5002561)
None None...
IntelĀ® High Level Synthesis Compiler Software Advisory
This advisory contains CVEs in Altera products and has been transferred to Altera for support. The updated advisory can be found at the link below: https://www.altera.com/product-security/advisory-archive/intel-sa-01113.html...