CVE-2024-25979 Msa-24-0002: forum search accepted random parameters in its url

The URL parameters accepted by forum search were not limited to the allowed parameters...

Out-of-bounds Write

libzephyr.so is vulnerable to Out of Bounds Write. The vulnerability is due to insufficient bounds checks when filtering IDs in the canstm32removerxfilter, cannxps32removerxfilter, and mcp2515removerxfilter functions. This issue arises because these functions do not adequately verify that the...

CVE-2024-26328

An issue was discovered in QEMU 7.1.0 through 8.2.1. registervfs in hw/pci/pciesriov.c does not set NumVFs to PCISRIOVTOTALVF, and thus interaction with hw/nvme/ctrl.c is mishandled...

Fixed in Apache Tomcat 11.0.0-M17

Important: Denial of Service CVE-2024-23672 It was possible for a WebSocket client to keep a WebSocket connection open leading to increased resource consumption. This was fixed with commit b0e3b1bd. This issue was identified by the Tomcat Security Team on 17 January 2024. The issue was made publi...

Authentication Bypass by Spoofing in github.com/greenpau/caddy-security

All versions of the package github.com/greenpau/caddy-security are vulnerable to Authentication Bypass by Spoofing via the X-Forwarded-For header due to improper input sanitization. An attacker can spoof an IP address used in the user identity module /whoami API endpoint. This could lead to...

MGASA-2024-0040 Updated vim packages fix a security vulnerability

The updated packages fix a security vulnerability: Vim before 9.0.2142 has a stack-based buffer overflow because didsetlangmap in map.c calls sprintf to write to the error buffer that is passed down to the option callback functions. CVE-2024-22667...

BELL-CVE-2024-22017

Bulletin has no description...

BELL-CVE-2024-21896

Bulletin has no description...

BELL-CVE-2024-22019

Bulletin has no description...

PT-2024-1915 · Ibm · Ibm Qradar Suite +1

Name of the Vulnerable Software and Affected Versions: IBM QRadar Suite versions 1.10.12.0 through 1.10.17.0 IBM Cloud Pak for Security versions 1.10.0.0 through 1.10.11.0 Description: The issue is related to insufficient protection of registration data in IBM QRadar Suite and IBM Cloud Pak for...

Magento Open Source allows OS Command Injection

Adobe Commerce versions 2.4.6-p3, 2.4.5-p5, 2.4.4-p6 and earlier are affected by an Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability that could lead in arbitrary code execution by an attacker. Exploitation of this issue does not require user...

Adobe Acrobat Reader 输入验证错误漏洞

Adobe Acrobat Reader is the United States of America Audobee Adobe, a PDF viewer. An input validation error vulnerability exists in Adobe Acrobat and Reader, which can be exploited by an attacker to cause a denial of service...

PT-2024-19021 · Joomla · Dp Calendar

Name of the Vulnerable Software and Affected Versions: DP Calendar component for Joomla affected versions not specified Description: The issue is related to a XSS vulnerability in the DP Calendar component for Joomla. There is no information provided about the estimated number of potentially...

PT-2024-3831 · Unknown · Sourcecodester Loan Management System +1

Name of the Vulnerable Software and Affected Versions: rems FAQ Management System version 1.0 SourceCodester FAQ Management System version 1.0 Description: A cross-site scripting XSS vulnerability allows a remote attacker to obtain sensitive information via a crafted payload to the Frequently Ask...

Design/Logic Flaw

A vulnerability exists in BIG-IP Next CNF and SPK systems that may allow access to undisclosed sensitive files. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

Design/Logic Flaw

When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-24775

CVE-2024-24775 affects BIG-IP (all modules). When a virtual server is configured with VLAN group and an SNAT listener, undisclosed traffic can cause the Traffic Management Microkernel (TMM) to terminate, resulting in a DoS on the BIG-IP system. The issue is documented in F5 advisories; fixes are ...

CVE-2023-36490

Improper initialization in some IntelR MAS software before version 2.3 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2023-35061

Improper initialization for the IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable information disclosure via adjacent access...

CVE-2023-27517

Improper access control in some IntelR OptaneTM PMem software before versions 01.00.00.3547, 02.00.00.3915, 03.00.00.0483 may allow an athenticated user to potentially enable escalation of privilege via local access...