Vulnerability database
Every flaw the U.S. government’s cybersecurity agency (CISA) has confirmed attackers are using, plus the new WordPress plugin and theme bugs published each day, sorted by what they mean for a small business. We refresh it twice a day. If you see something your website or office runs, tell us.
7,366 results · page 61 of 148
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37327 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37326 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37324 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2022 for (CU 13)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37323 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37322 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37321 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37320 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37319 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-37318 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-35272 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft Visual Studio 2017 version 15.9 (includes 15.0 - 15.8)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-35271 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-35256 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-28928 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21449 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21428 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21425 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2019 for x64-based Systems (CU 27)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21415 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21414 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21398 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21373 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21335 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21333 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21332 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21331 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21317 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21308 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-21303 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2022 for (CU 13)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024SQL Server Native Client OLE DB Provider Remote Code Execution VulnerabilityCVE-2024-20701 · Computers, phones & browsers · Microsoft · reported by secure@microsoft.comHigh 8.8
SQL Server Native Client OLE DB Provider Remote Code Execution Vulnerability
- Product
- Microsoft SQL Server 2017 (GDR)
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmsrc.microsoft.commsrc.microsoft.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1).CVE-2024-39569 · Other software · Siemens · reported by productcert@siemens.comHigh 7.5
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an administrative remote attacker running a corresponding SINEMA Remote Connect Server to execute arbitrary code with system privileges on the client system.
- Product
- SINEMA Remote Connect Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert-portal.siemens.comcert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1).CVE-2024-39568 · Other software · Siemens · reported by productcert@siemens.comHigh 8.5
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading proxy configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
- Product
- SINEMA Remote Connect Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert-portal.siemens.comcert-portal.siemens.com
Jul 9, 2024A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1).CVE-2024-39567 · Other software · Siemens · reported by productcert@siemens.comHigh 8.5
A vulnerability has been identified in SINEMA Remote Connect Client (All versions < V3.2 HF1). The system service of affected applications is vulnerable to command injection due to missing server side input sanitation when loading VPN configurations. This could allow an authenticated local attacker to execute arbitrary code with system privileges.
- Product
- SINEMA Remote Connect Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcert-portal.siemens.comcert-portal.siemens.com
Jul 9, 2024SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges.CVE-2024-37175 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 4.3
SAP CRM WebClient does not perform necessary authorization check for an authenticated user, resulting in escalation of privileges. This could allow an attacker to access some sensitive information.
- Product
- SAP CRM WebClient UI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requCVE-2024-39598 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 5
SAP CRM (WebClient UI Framework) allows an authenticated attacker to enumerate accessible HTTP endpoints in the internal network by specially crafting HTTP requests. On successful exploitation this can result in information disclosure. It has no impact on integrity and availability of the application.
- Product
- SAP CRM WebClient UI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vulnerability.CVE-2024-37174 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.1
Custom CSS support option in SAP CRM WebClient UI does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting vulnerability. On successful exploitation an attacker can cause limited impact on confidentiality and integrity of the application.
- Product
- SAP CRM WebClient UI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 9, 2024Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script.CVE-2024-37173 · Network & remote access · SAP_SE · reported by cna@sap.comMedium 6.1
Due to insufficient input validation, SAP CRM WebClient UI allows an unauthenticated attacker to craft a URL link which embeds a malicious script. When a victim clicks on this link, the script will be executed in the victim's browser giving the attacker the ability to access and/or modify information with no effect on availability of the application.
- Product
- SAP CRM WebClient UI
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 8, 2024A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevatCVE-2024-4944 · Network & remote access · WatchGuard · reported by 5d1c2695-1a31-4499-88ae-e847036fd7e3High 8.6
A local privilege escalation vlnerability in the WatchGuard Mobile VPN with SSL client on Windows enables a local user to execute arbitrary commands with elevated privileged.
- Product
- Mobile VPN with SSL Client
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordpsirt.watchguard.comwatchguard.com
Jul 8, 2024OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing seCVE-2024-28882 · Other software · OpenVPN · reported by security@openvpn.netMedium 4.3
OpenVPN from 2.6.0 through 2.6.10 in a server role accepts multiple exit notifications from authenticated clients which will extend the validity of a closing session
- Product
- OpenVPN
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcommunity.openvpn.netmail-archive.com
Jul 8, 2024Undici is an HTTP/1.1 client, written from scratch for Node.js.CVE-2024-38372 · Other software · nodejs · reported by GitHubLow 2
Undici is an HTTP/1.1 client, written from scratch for Node.js. Depending on network and process conditions of a `fetch()` request, `response.arrayBuffer()` might include portion of memory from the Node.js process. This has been patched in v6.19.2.
- Product
- undici
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 5, 2024Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software.CVE-2024-34361 · Other software · pi-hole · reported by GitHubHigh 8.5
Pi-hole is a DNS sinkhole that protects devices from unwanted content without installing any client-side software. A vulnerability in versions prior to 5.18.3 allows an authenticated user to make internal requests to the server via the `gravity_DownloadBlocklistFromUrl()` function. Depending on some circumstances, the vulnerability could lead to remote command execution. Version 5.18.3 contains a patch for this issue.
- Product
- pi-hole
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 3, 2024The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client systemCVE-2024-39920 · Other software · ietf · reported by MITREMedium 4.3
The TCP protocol in RFC 9293 has a timing side channel that makes it easier for remote attackers to infer the content of one TCP connection from a client system (to any server), when that client system is concurrently obtaining TCP data at a slow rate from an attacker-controlled server, aka the "SnailLoad" issue. For example, the attack can begin by measuring RTTs via the TCP segments whose role is to provide an ACK control bit and an Acknowledgment Number.
- Product
- tcp
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgithub.comnews.ycombinator.com
Jul 2, 2024The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higCVE-2024-24791 · Other software · Go standard library · reported by security@golang.orgHigh 7.5
The net/http HTTP/1.1 client mishandled the case where a server responds to a request with an "Expect: 100-continue" header with a non-informational (200 or higher) status. This mishandling could leave a client connection in an invalid state, where the next request sent on the connection will fail. An attacker sending a request to a net/http/httputil.ReverseProxy proxy can exploit this mishandling to cause a denial of service by sending "Expect: 100-continue" requests which elicit a non-informational response from the backend. Each such request leaves the proxy with an invalid connection, and causes one subsequent request using that connection to fail.
- Product
- net/http
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jul 2, 2024Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive infCVE-2024-20898 · Computers, phones & browsers · Samsung Mobile · reported by mobile.security@samsung.comMedium 4
Use of implicit intent for sensitive communication in SoftphoneClient in IMS service prior to SMR Jul-2024 Release 1 allows local attackers to get sensitive information.
- Product
- Samsung Mobile Devices
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordsecurity.samsungmobile.comsecurity.samsungmobile.com
Jun 29, 2024Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module funcCVE-2024-39840 · Other software · factorio · reported by MITREHigh 8.8
Factorio before 1.1.101 allows a crafted server to execute arbitrary code on clients via a custom map that leverages the ability of certain Lua base module functions to execute bytecode and generate fake objects.
- Product
- factorio
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordmemorycorruption.netnews.ycombinator.com
Jun 27, 2024Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: CVE-2024-3330 · Other software · Spotfire · reported by security@tibco.comCritical 9.9
Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code.This requires human interaction from a person other than the attacker., In the case of the Web player (Business Author): Successful execution of this vulnerability via the Web Player, will result in the attacker being able to run arbitrary code as the account running the Web player process, In the case of Automation Services: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code via Automation Services..This issue affects Spotfire Analyst: from 12.0.9 through 12.5.0, from 14.0 through 14.0.2; Spotfire Server: from 12.0.10 through 12.5.0, from 14.0 through 14.0.3, from 14.2.0 through 14.3.0; Spotfire for AWS Marketplace: from 14.0 before 14.3.0.
- Product
- Spotfire Analyst
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordcommunity.spotfire.comcommunity.spotfire.com
Jun 27, 2024Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to beCVE-2024-5535 · Websites & servers · OpenSSL · reported by openssl-security@openssl.orgCritical 9.1
Issue summary: Calling the OpenSSL API function SSL_select_next_proto with an empty supported client protocols buffer may cause a crash or memory contents to be sent to the peer. Impact summary: A buffer overread can have a range of potential consequences such as unexpected application beahviour or a crash. In particular this issue could result in up to 255 bytes of arbitrary private data from memory being sent to the peer leading to a loss of confidentiality. However, only applications that directly call the SSL_select_next_proto function with a 0 length list of supported client protocols are affected by this issue. This would normally never be a valid scenario and is typically not under attacker control but may occur by accident in the case of a configuration or programming error in the calling application. The OpenSSL API function SSL_select_next_proto is typically used by TLS applications that support ALPN (Application Layer Protocol Negotiation) or NPN (Next Protocol Negotiation). NPN is older, was never standardised and is deprecated in favour of ALPN. We believe that ALPN is significantly more widely deployed than NPN. The SSL_select_next_proto function accepts a list of p
- Product
- OpenSSL
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 25, 2024ai-client-html is an Aimeos e-commerce HTML client component.CVE-2024-38516 · Other software · aimeos · reported by GitHubHigh 8.8
ai-client-html is an Aimeos e-commerce HTML client component. Debug information revealed sensitive information from environment variables in error log. This issue has been patched in versions 2024.04.7, 2023.10.15, 2022.10.13 and 2021.10.22.
- Product
- ai-client-html
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 25, 2024In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling CVE-2024-39468 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67High 7.5
In the Linux kernel, the following vulnerability has been resolved: smb: client: fix deadlock in smb2_find_smb_tcon() Unlock cifs_tcp_ses_lock before calling cifs_put_smb_ses() to avoid such deadlock.
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Jun 25, 2024In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9_client_rpc() Syzbot with the help of KMSAN reported the folCVE-2024-39301 · Computers, phones & browsers · Linux · reported by 416baaa9-dc9f-4396-8d5f-8c081fb06d67Medium 5.5
In the Linux kernel, the following vulnerability has been resolved: net/9p: fix uninit-value in p9_client_rpc() Syzbot with the help of KMSAN reported the following error: BUG: KMSAN: uninit-value in trace_9p_client_res include/trace/events/9p.h:146 [inline] BUG: KMSAN: uninit-value in p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 trace_9p_client_res include/trace/events/9p.h:146 [inline] p9_client_rpc+0x1314/0x1340 net/9p/client.c:754 p9_client_create+0x1551/0x1ff0 net/9p/client.c:1031 v9fs_session_init+0x1b9/0x28e0 fs/9p/v9fs.c:410 v9fs_mount+0xe2/0x12b0 fs/9p/vfs_super.c:122 legacy_get_tree+0x114/0x290 fs/fs_context.c:662 vfs_get_tree+0xa7/0x570 fs/super.c:1797 do_new_mount+0x71f/0x15e0 fs/namespace.c:3352 path_mount+0x742/0x1f20 fs/namespace.c:3679 do_mount fs/namespace.c:3692 [inline] __do_sys_mount fs/namespace.c:3898 [inline] __se_sys_mount+0x725/0x810 fs/namespace.c:3875 __x64_sys_mount+0xe4/0x150 fs/namespace.c:3875 do_syscall_64+0xd5/0x1f0 entry_SYSCALL_64_after_hwframe+0x6d/0x75 Uninit was created at: __alloc_pages+0x9d6/0xe70 mm/page_alloc.c:4598 __alloc_pages_node include/linux/gfp.h:238 [inline] alloc_pages_node include/linux/gfp.h:261 [inline]
- Product
- Linux
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Full record and what to do →NVD recordgit.kernel.orggit.kernel.org
Jun 25, 2024Missing authorization in Client-Server API in Conduit <=0.7.0, allowing for any alias to be removed and added to another room, which can be used for privilege eCVE-2024-6303 · Other software · The Conduit Contributors · reported by cve@gitlab.comCritical 9.9
Missing authorization in Client-Server API in Conduit <=0.7.0, allowing for any alias to be removed and added to another room, which can be used for privilege escalation by moving the #admins alias to a room which they control, allowing them to run commands resetting passwords, siging json with the server's key, deactivating users, and more
- Product
- Conduit
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Jun 25, 2024Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component.CVE-2024-32855 · Other software · Dell · reported by security_alert@emc.comLow 3.8
Dell Client Platform BIOS contains an Out-of-bounds Write vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering.
- Product
- CPG BIOS
- What to do
- Apply the vendor’s update. The NVD record links to the advisory.
Where this comes from: the exploited list is CISA’s Known Exploited Vulnerabilities catalog. Everything else is the whole National Vulnerability Database, where each record is published by the team that found the bug (Wordfence, Patchstack, WPScan, the vendors themselves and others); we show who. Exploit odds are FIRST’s EPSS, updated daily. Titles and categories are ours, so check the linked record before acting on a detail. For a write-up of the big ones, see our advisories. Every vendor, and every WordPress plugin and theme with a recorded flaw, also has its own page. All of it is free to reuse as JSON, CSV or RSS.
Weekly security brief
The flaws that hit local websites, every Friday.
One short email: what got exploited this week, which WordPress plugins broke, and what to check. Unsubscribe in one click.
Tell us what you're building.
A website, your marketing, a security check, an app, or the thing you've been running out of a spreadsheet for three years. A few lines is plenty.
Not ready to talk yet? Run the free website check and see what Google sees.