CVE-2024-21990

ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an attacker to view Deploy configuration information and modify the account credentials...

CVE-2024-21990

CVE-2024-21990 concerns ONTAP Select Deploy administration utility, where hard-coded credentials in versions 9.12.1.x, 9.13.1.x and 9.14.1.x may allow an attacker to view Deploy configuration information and modify account credentials. The issue is documented across multiple sources (NetApp advis...

CVE-2024-21989 Privilege Escalation Vulnerability in ONTAP Select Deploy administration utility

ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could allow a read-only user to escalate their privileges...

CVE-2024-21989

CVE-2024-21989 affects NetApp ONTAP Select Deploy administration utility (versions 9.12.1.x, 9.13.1.x, 9.14.1.x). A read-only user can escalate privileges due to the vulnerability. Connected advisories confirm affected versions and privilege escalation risk; mitigation guidance varies—PT-Security...

CVE-2024-21989: Improper Privilege Management

ONTAP Select Deploy administration utility versions 9.12.1.x, 9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when successfully exploited could allow a read-only user to escalate their privileges...

CVE-2024-21105

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

CVE-2024-21088

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite component: Import Utility. Supported versions that are affected are 12.2.4-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Production...

CVE-2024-21059

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

Out-of-bounds Write

gtkwave is vulnerable to Out-of-bounds Write. The vulnerability is due to insufficient bounds checking within its VCD parsevaluechange portdump functionality via the vcd2vzt conversion utility. It allows a Crafting a specially designed .vcd file can result in arbitrary code execution...

Out-of-Bounds-Read

gtkwave is vulnerable to Out-of-Bounds-Read. The vulnerability is due to inadequate bounds checking within its VCD var definition section functionality via the vcd2lxt2 conversion utility. It allows a Crafting a specially designed .vcd file can result in arbitrary code execution...

PT-2024-4880 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: Oracle Solaris version 11 Description: The issue is related to insufficient protection of sensitive data in the Utility component of Oracle Solaris. Exploitation of this issue can allow an attacker to gain unauthorized access to protected...

CVE-2024-21059: Improper Privilege Management

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Difficult to exploit vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. While the...

PT-2024-4902 · Oracle · Oracle Production Scheduling

Name of the Vulnerable Software and Affected Versions: Oracle Production Scheduling versions 12.2.4 through 12.2.12 Description: The issue exists due to insufficient input validation in the Import Utility component of Oracle Production Scheduling in Oracle E-Business Suite. This allows a remote...

CVE-2024-21088: Inconsistent Interpretation of HTTP Requests

Vulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite component: Import Utility. Supported versions that are affected are 12.2.4-12.2.12. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Production...

CVE-2024-21105: Integer Overflow or Wraparound

Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is affected is 11. Easily exploitable vulnerability allows high privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successful...

PT-2024-3525

Name of the Vulnerable Software and Affected Versions Oracle Solaris version 11 Description The issue is related to insufficient access controls in the Utility component of Oracle Solaris, allowing a low-privileged attacker with logon access to the infrastructure to compromise the system...

Security Bulletin: IBM® Db2® may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. (CVE-2021-20373)

Summary Db2 may be vulnerable to an Information Disclosure when using the LOAD utility as under certain circumstances the LOAD utility does not enforce directory restrictions. Vulnerability Details CVEID:CVE-2021-20373 DESCRIPTION: IBM Db2 9.7, 10.1, 10.5, 11.1, and 11.5 may be vulnerable to an...

Intel Binary Configuration Tool Uncontrolled Search Path

The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a attacker to enhance their privileges...

Intel QSFP+ Configuration Utility Privilege Escalation

The vulnerability of the Intel QSFP+ Configuration Utility for configuring and managing network devices is related to an uncontrolled search path element. Exploiting this vulnerability could allow attackers to enhance their privileges...

Inteset Systems Secure Lockdown 安全漏洞

Inteset Systems Secure Lockdown is a Windows lockdown utility from Inteset Systems, Inc. Allows access to only desired applications from a highly customizable menu. A security vulnerability exists in Inteset Systems Secure Lockdown version v2.00.219, which stems from a vulnerability that allows a...