CVE-2024-40509

OpenPetra 2023.02 is affected by a Cross Site Scripting vulnerability in the serverMFinDev.asmx function. The issue enables an unauthenticated or remote attacker to obtain sensitive information (and, per exploit details, potentially steal cookies) via crafted input in serverMFinDev.asmx. Root cau...

CVE-2024-40510

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMCommon.asmx function...

CVE-2024-40511

CVE-2024-40511 is a Cross Site Scripting vulnerability affecting openPetra v.2023.02. The issue arises in the serverMServerAdmin.asmx function, enabling a remote attacker to obtain sensitive information. Public sources confirm the affected software/version and the vulnerable endpoint, but do not ...

CVE-2024-40512

CVE-2024-40512 affects OpenPetra v2023.02 and is caused by a cross‑site scripting (XSS) vulnerability in the serverMReporting.asmx function. The issue can allow a remote attacker to obtain sensitive information from the server. Affected component: the serverMReporting.asmx endpoint within OpenPet...

CVE-2024-40509

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMFinDev.asmx function...

CVE-2024-40507

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function...

CVE-2024-40508

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMConference.asmx function...

CVE-2024-40507

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function...

CVE-2024-40507

OpenPetra OpenPetra v2023.02 is affected by a Cross Site Scripting (XSS) vulnerability in serverMPersonnel.asmx that can allow a remote attacker to obtain sensitive information. Affects the web application OpenPetra 2023.02; exploit details indicate the vulnerability resides in the serverMPersonn...

CVE-2024-40507

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMPersonnel.asmx function...

CVE-2024-40506

Cross Site Scripting vulnerability in openPetra v.2023.02 allows a remote attacker to obtain sensitive information via the serverMHospitality.asmx function...

CVE-2023-51157

CVE-2023-51157 affects ZKTeco WDMS v5.1.3 Pro. A Cross Site Scripting (XSS) flaw allows a remote attacker, via a crafted script in the Emp Name field, to execute arbitrary code and access sensitive data. CVSS v3.1 base metrics: AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N (Impact: Confidentiality, Integri...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7009-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7009-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

kernel: net: openvswitch: fix overwriting ct original tuple for ICMPv6

In the Linux kernel, the following vulnerability has been resolved: net: openvswitch: fix overwriting ct original tuple for ICMPv6 OVSPACKETCMDEXECUTE has 3 main attributes: - OVSPACKETATTRKEY - Packet metadata in a netlink format. - OVSPACKETATTRPACKET - Binary packet content. -...

Discord Introduces DAVE Protocol for End-to-End Encryption in Audio and Video Calls

Popular social messaging platform Discord has announced that it's rolling out a new custom end-to-end encrypted E2EE protocol to secure audio and video calls. The protocol has been dubbed DAVE, short for Discord's audio and video end-to-end encryption "E2EE A/V". As part of the change introduced...

CVE-2024-42861

An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted PdelayReq message to the time synchronization function...

Ubuntu 20.04 LTS / 22.04 LTS : Linux kernel vulnerabilities (USN-7007-3)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-3 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use...

Ubuntu 20.04 LTS : Linux kernel vulnerabilities (USN-7007-2)

The remote Ubuntu 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-7007-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...

CVE-2024-42861

An issue in IEEE 802.1AS linuxptp v.4.2 and before allowing a remote attacker to cause a denial of service via a crafted PdelayReq message to the time synchronization function...

Ubuntu 24.04 LTS : Linux kernel vulnerabilities (USN-6999-2)

The remote Ubuntu 24.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6999-2 advisory. Chenyuan Yang discovered that the CEC driver driver in the Linux kernel contained a use-after-free vulnerability. A local attacker could use this to caus...