CVE-2024-44181

An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read sensitive location information...

CVE-2024-40826

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An unencrypted document may be written to a temporary file when using print preview...

CVE-2024-40826

A privacy issue was addressed with improved handling of files. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An unencrypted document may be written to a temporary file when using print preview...

The vulnerability of the “Avora” operating system’s isolation component, which stems from the lack of control over application permissions, allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the “Avora” operating system’s isolation component is related to the lack of control over permissions for applications accessing temporary folders. Exploiting this vulnerability can lead to breaches of data confidentiality, integrity, and accessibility...

DEBIAN-CVE-2024-46701

In the Linux kernel, the following vulnerability has been resolved: libfs: fix infinite directory reads for offset dir After we switch tmpfs dir operations from simplediroperations to simpleoffsetdiroperations, every rename happened will fill new dentry to dest dir's maple...

The vulnerability of the Nano text editor lies in errors in processing temporary files, which allows attackers to compromise data integrity.

The vulnerability of the Nano text editor is related to errors in processing temporary files. Exploiting this vulnerability can allow an attacker to compromise the integrity of the data...

The vulnerability of monitoring software and Performance Co-Pilot (PCP) systems, which involves creating temporary files with insecure permissions, allows attackers to carry out attacks using symbolic links and to circumvent user isolation measures provided by PCP.

The vulnerability of the Performance Co-Pilot PCP monitoring and performance visualization software is related to the mixed levels of privileges used by systemd services associated with PCP. Exploiting this vulnerability allows an attacker to carry out attacks using symbolic links and to circumve...

PT-2024-31187 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: A command injection issue was discovered via the sys mgmt function. Recommendations: For versions 22.2.1 through 23.1.0, consider disabling the sys mgmt function as a temporary workaround...

PT-2024-31185 · Rely-Pcie · Rely-Pcie

Name of the Vulnerable Software and Affected Versions: RELY-PCIe versions 22.2.1 through 23.1.0 Description: The issue is related to a code injection vulnerability via the getParams function in phpinf.php. This vulnerability allows for code injection, which can lead to unauthorized access and...

PT-2024-39180 · Kaon · Kaon Cg3000

Name of the Vulnerable Software and Affected Versions: Kaon CG3000 version 1.01.43 Description: A problematic issue has been found in the dhcpcd Command Handler component, allowing for cross-site scripting through the manipulation of the argument -h with malicious input, such as alert'XSS'. This...

PT-2024-12602 · Loftware · Loftware Spectrum

Name of the Vulnerable Software and Affected Versions: Loftware Spectrum versions through 4.6 Description: The issue concerns an unprotected JMX Registry in Loftware Spectrum. Recommendations: For versions through 4.6, consider restricting access to the JMX Registry as a temporary mitigation...

PT-2024-31615 · Yeti · Yeti

Name of the Vulnerable Software and Affected Versions: Yeti versions prior to 2.1.11 Description: The issue concerns a denial of service vulnerability. Remote user-controlled data tags can lead to Unicode normalization with a compatibility form NFKD. Under Windows, such normalization is costly in...

PT-2024-28540 · Dell · Dell Powerscale Insightiq

Name of the Vulnerable Software and Affected Versions: Dell PowerScale InsightIQ version 5.0 Description: The issue is related to the use of hard-coded credentials in Dell PowerScale InsightIQ. A high-privileged attacker with local access could potentially exploit this, leading to information...

PT-2024-39117 · Totolink · Totolink Ac1200 T8

Name of the Vulnerable Software and Affected Versions: TOTOLINK AC1200 T8 version 4.1.5cu.861 B20230220 Description: A critical vulnerability was found in the TOTOLINK AC1200 T8, affecting unknown code of the file /etc/shadow.sample. The manipulation leads to the use of a hard-coded password. The...

CVE-2024-7627

The Bit File Manager plugin for WordPress is vulnerable to Remote Code Execution in versions 6.0 to 6.5.5 via the 'checkSyntax' function. This is due to writing a temporary file to a publicly accessible directory before performing file validation. This makes it possible for unauthenticated...

PT-2024-39034 · Unknown · Job Portal

Name of the Vulnerable Software and Affected Versions: Job Portal versions affected versions not specified Description: The issue is related to a SQL injection vulnerability. An attacker could send a specially designed query through the id parameter in the "/jobportal/admin/category/index.php"...

CVE-2024-34642

Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information...

CVE-2024-34642

Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information...

CVE-2024-34642

Improper authorization in One UI Home prior to SMR Sep-2024 Release 1 allows physical attackers to temporarily access sensitive information...

PT-2024-38278 · Progress · Openedge

Name of the Vulnerable Software and Affected Versions: OpenEdge LTS versions prior to 11.7.18 OpenEdge LTS versions prior to 12.2.13 Description: A Local ABL Client bypass of the required PASOE security checks may allow an attacker to commit unauthorized code injection into Multi-Session Agents o...