The issue was addressed with improved memory handling. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, macOS Sonoma 14.2. Processing web content may lead to a denial-of-service.
AFFECTED_PRODUCTS:
Apple macOS,
Apple Safari,
Apple Iphone Os
... (+1)
A use after free issue was addressed with improved memory management. This issue is fixed in Safari 17.2, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. Processing maliciously crafted web content may lead to arbitrary code execution.
AFFECTED_PRODUCTS:
Apple macOS,
Apple Safari,
Apple Iphone Os
... (+3)
A path handling issue was addressed with improved validation. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to break out of its sandbox.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Apple macOS
... (+4)
This issue was addressed with improved redaction of sensitive information. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to access user-sensitive data.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Apple macOS
... (+4)
The issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A process may gain admin privileges without proper authentication.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Apple macOS
This issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. An app may be able to modify protected parts of the file system.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Apple macOS
This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.2. Remote Login sessions may be able to obtain full disk access permissions.
AFFECTED_PRODUCTS:
Apple macOS
An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Sonoma 14.2. An app may be able to modify protected parts of the file system.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Apple macOS
... (+4)
A permissions issue was addressed by removing vulnerable code and adding additional checks. This issue is fixed in macOS Monterey 12.7.2, macOS Ventura 13.6.3, iOS 17.2 and iPadOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, tvOS 17.2, watchOS 10.2, macOS Sonoma 14.2. An app may be able to access protected u...
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Apple macOS
... (+6)
A use-after-free issue was addressed with improved memory management. This issue is fixed in macOS Ventura 13.6.3, macOS Sonoma 14.2, macOS Monterey 12.7.2. A local attacker may be able to elevate their privileges.
AFFECTED_PRODUCTS:
Apple macOS,
Apple macOS,
Apple macOS
A privacy issue was addressed by moving sensitive data to a protected location. This issue is fixed in macOS Sonoma 14.2. An app may be able to access user-sensitive data.
AFFECTED_PRODUCTS:
Apple macOS
A vulnerability was found in SourceCodester Simple Subscription Website 1.0 and classified as critical. This issue affects some unknown processing of the file manage_user.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been discl...
AFFECTED_PRODUCTS:
Oretnom23 Simple Subscription Website
A vulnerability has been found in Netentsec NS-ASG Application Security Gateway 6.3 and classified as critical. This vulnerability affects unknown code of the file /protocol/log/listloginfo.php. The manipulation leads to sql injection. The attack can be initiated remotely. The exploit has been discl...
AFFECTED_PRODUCTS:
Netentsec Application Security Gateway
A vulnerability, which was classified as critical, was found in Netentsec NS-ASG Application Security Gateway 6.3. This affects an unknown part of the file /admin/list_crl_conf. The manipulation of the argument CRLId leads to sql injection. It is possible to initiate the attack remotely. The exploit...
AFFECTED_PRODUCTS:
Netentsec Application Security Gateway
A vulnerability classified as critical has been found in Shanghai Brad Technology BladeX 3.4.0. Affected is an unknown function of the file /api/blade-user/export-user of the component API. The manipulation with the input updatexml(1,concat(0x3f,md5(123456),0x3f),1)=1 leads to sql injection. It is p...
AFFECTED_PRODUCTS:
Shanghai Brad Technology Bladex Project Shanghai Brad Technology Bladex
In JetBrains TeamCity before 2024.03 server administrators could remove arbitrary files from the server by installing tools
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2024.03 xXE was possible in the Maven build steps detector
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2024.03 xSS was possible via Agent Distribution settings
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2024.03 reflected XSS was possible via Space connection configuration
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2024.03 2FA could be bypassed by providing a special URL parameter
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2024.03 open redirect was possible on the login page
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2024.03 authenticated users without administrative permissions could register other users when self-registration was disabled
AFFECTED_PRODUCTS:
Jetbrains TeamCity
Tenda AC10U v15.03.06.48 has a stack overflow vulnerability in the deviceId, limitSpeed, limitSpeedUp parameter from formSetClientState function.
AFFECTED_PRODUCTS:
Tenda Ac10u Firmware
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the list1 parameter of the fromDhcpListClient function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceMac parameter of the addWifiMacFilter function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1203 v2.0.1.6 firmware has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Fortra's Robot Schedule Enterprise Agent for Windows prior to version 3.04 is susceptible to privilege escalation. A low-privileged user can overwrite the service executable. When the service is restarted, the replaced binary runs with local system privileges, allowing a low-privileged user to gain...
AFFECTED_PRODUCTS:
Fortra Robot Schedule
The console may experience a service interruption when processing file names with invalid characters.
An administrative user of WebReports may perform a Cross Site Scripting (XSS) and/or Man in the Middle (MITM) exploit through SAML configuration.
An administrative user of WebReports may perform a Server Side Request Forgery (SSRF) exploit through SMTP configuration options.
AFFECTED_PRODUCTS:
Hcltech Bigfix Platform,
Hcltech Bigfix Platform
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1203 v2.0.1.6 has a stack overflow vulnerability in the page parameter of the fromDhcpListClient function.
AFFECTED_PRODUCTS:
Tenda Fh1203 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the page parameter of the fromAddressNat function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the time parameter of the saveParentControlInfo function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedEndTime parameter of the setSchedWifi function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) firmware has a stack overflow vulnerability in the entrys parameter of the fromAddressNat function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the schedStartTime parameter of the setSchedWifi function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the urls parameter of the saveParentControlInfo function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security_5g parameter of the formWifiBasicSet function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the deviceId parameter of the saveParentControlInfo function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the security parameter of the formWifiBasicSet function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
Tenda FH1202 v1.2.0.14(408) has a stack overflow vulnerability in the mitInterface parameter of the fromAddressNat function.
AFFECTED_PRODUCTS:
Tenda Fh1202 Firmware
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. An oversight during the writing of the patch for CVE-2024-29897 may have exposed suppressed wiki requests to private wikis that added Special:RequestWikiQueue to the read whitelist to users without the `(read)` permission....
CreateWiki is Miraheze's MediaWiki extension for requesting & creating wikis. It is possible for users with (delete) or (suppressrevision) on any wiki in the farm to access suppressed wiki requests by going to the request's entry on Special:RequestWikiQueue on the wiki where they have these rights....
SRS is a simple, high-efficiency, real-time video server. SRS's `/api/v1/vhosts/vid-<id>?callback=<payload>` endpoint didn't filter the callback function name which led to injecting malicious javascript payloads and executing XSS ( Cross-Site Scripting). This vulnerability is fixed in 5.0.210 and 6....