PT-2024-34362 · Unknown · Ironman Powershell Universal

Name of the Vulnerable Software and Affected Versions: Ironman PowerShell Universal versions prior to 5.0.12 Description: The issue allows an authenticated attacker to elevate their privileges and view job information. Recommendations: For versions prior to 5.0.12, update to version 5.0.12 or lat...

CVE-2024-50616

Ironman PowerShell Universal 5.x before 5.0.12 allows an authenticated attacker to elevate their privileges and view job information...

Ironman PowerShell Universal 安全漏洞

Ironman PowerShell Universal is a single pane for managing and delegating access to automation environments from Ironman. A security vulnerability exists in Ironman PowerShell Universal version 5.x prior to 5.0.12, which originates from a vulnerability that allows an authenticated attacker to...

CVE-2024-50616

Ironman PowerShell Universal 5.x before 5.0.12 is affected. An authenticated attacker can elevate privileges and view job information. The issue originates from Ironman PowerShell Universal prior to version 5.0.12, with documented vulnerability across multiple sources (NVD/Red Hat/CVE lists). The...

CVE-2024-49378 smartUp Cross-site Scripting vulnerability

smartUp, a web browser mouse gestures extension, has a universal cross-site scripting issue in the Edge and Firefox versions of smartUp 7.2.622.1170. The vulnerability allows another extension to execute arbitrary code in the context of the user’s tab. As of time of publication, no known patches...

DEBIAN-CVE-2024-50057

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tipd: Free IRQ only if it was requested before In polling mode, if no IRQ was requested there is no need to free it. Call devmfreeirq only if client-irq is set. This fixes the warning caused by the tps6598x module...

DEBIAN-CVE-2022-48946

In the Linux kernel, the following vulnerability has been resolved: udf: Fix preallocation discarding at indirect extent boundary When preallocation extent is the first one in the extent block, the code would corrupt extent tree header instead. Fix the problem and use udfdeleteaext for deleting...

AZL-51138 CVE-2024-47718 affecting package kernel for versions less than 5.15.173.1-1

In the Linux kernel, the following vulnerability has been resolved: wifi: rtw88: always wait for both firmware loading attempts In 'rtwwaitfirmwarecompletion', always wait for both regular and wowlan firmware loading attempts. Otherwise if 'rtwusbintfinit' has failed in 'rtwusbprobe',...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a possible buffer overflow in the usb gadget driver uvc during the setup handler...

Malicious code in eventstream-serde-universal (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-9605 Malicious code in eventstream-serde-universal (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-46760

...

CVE-2024-46843

...

CVE-2024-44960

...

CVE-2024-43861

...

CVE-2024-46675

...

CVE-2024-46719

...

CVE-2024-45011

...

CVE-2024-46674

...

SUSE CVE-2024-47671

In the Linux kernel, the following vulnerability has been resolved: USB: usbtmc: prevent kernel-usb-infoleak The syzbot reported a kernel-usb-infoleak in usbtmcwrite, we need to clear the structure before filling fields...