CentOS: Security Advisory for python-pillow (CESA-2024:0345)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the CNCSoft-B software in numerical control systems allows a malicious actor to execute arbitrary code, due to an uncontrolled element in the search process.

The vulnerability of the CNCSoft-B numerical control software system is related to an uncontrollable element in the search process. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code...

RHEL 9 : squid (RHSA-2024:1085)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:1085 advisory. Squid is a high-performance proxy caching server for web clients, supporting FTP, Gopher, and HTTP data objects. Security Fixes: squid: denial of...

The vulnerability of the `sys_membarrier` function in the `membarrier` component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the sysmembarrier function in the membarrier component of the Linux operating system’s kernel is related to uncontrolled resource consumption. Exploiting this vulnerability could allow an attacker to cause a service failure...

The vulnerability of the Intel MPI Library’s parallel programming library, related to an uncontrolled element in the search process, allows attackers to increase their privileges.

The vulnerability of the Intel MPI Library, which is related to parallel programming, involves an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Ruby interpreter’s Rack module’s interface allows a hacker to trigger a service failure.

The vulnerability of the Ruby interpreter’s Rack module interface is related to an uncontrolled resource consumption. Exploiting this vulnerability can allow a malicious actor to cause service failures...

openSUSE: Security Advisory for mdadm (SUSE-SU-2023:3953-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2023-39254

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

CVE-2023-39254

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

Design/Logic Flaw

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

CVE-2023-39254

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

CVE-2023-39254

Dell Update Package (DUP) suffers an Uncontrolled Search Path vulnerability in versions prior to 4.9.10. A local attacker could potentially exploit this to execute arbitrary code with admin privileges. Affected product/component: Dell Update Package (DUP) framework. Root cause: uncontrolled searc...

CVE-2023-39254

Dell Update Package DUP, Versions prior to 4.9.10 contain an Uncontrolled Search Path vulnerability. A malicious user with local access to the system could potentially exploit this vulnerability to run arbitrary code as admin...

Dell Update Package (DUP) Framework Code Issue Vulnerability

Dell Update Package DUP Framework is a framework for updating system components from Dell USA. The product primarily provides installers for drivers, applications, BIOS, and firmware. A code issue vulnerability exists in Dell Update Package DUP Framework that stems from the inclusion of an...

PT-2024-12786 · Dell · Dell Update Package

Name of the Vulnerable Software and Affected Versions: Dell Update Package DUP versions prior to 4.9.10 Description: The issue allows a malicious user with local access to the system to potentially exploit it and run arbitrary code as admin. This is due to an Uncontrolled Search Path vulnerabilit...

PT-2024-22235 · Intel · Intel Gpa

Name of the Vulnerable Software and Affected Versions: IntelR GPA software versions prior to 2024.1 Description: The issue is related to an uncontrolled search path in some IntelR GPA software, which may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2023-6132 AVEVA Edge products Uncontrolled Search Path Element

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL...

CVE-2023-6132 AVEVA Edge products Uncontrolled Search Path Element

The vulnerability, if exploited, could allow a malicious entity with access to the file system to achieve arbitrary code execution and privilege escalation by tricking AVEVA Edge to load an unsafe DLL...

The vulnerability of the Device Insight function in microprogrammed software for ZyXEL network devices, such as USG FLEX, USG FLEX 50(W)/USG20(W)-VPN, USG FLEX H, and ATP, allows a intruder to cause service interruptions.

The vulnerability of the Device Insight function in the microprogramming software for ZyXEL network devices, such as USG FLEX, USG FLEX 50W/USG20W-VPN, USG FLEX H, and ATP, is related to the use of uncontrolled format strings. Exploiting this vulnerability could allow a malicious actor to cause...

PT-2024-8901 · Intel · Intel Fpga Sdk For Opencl

Name of the Vulnerable Software and Affected Versions: IntelR FPGA SDK for OpenCLTM affected versions not specified Description: The issue is related to an uncontrolled search path in some IntelR FPGA SDK for OpenCLTM software technology. This may allow an authenticated user to potentially enable...