Critical - CVE-2024-23476 - The SolarWinds Access Rights Manager (ARM) was...
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user...
High - CVE-2024-23477 - The SolarWinds Access Rights Manager (ARM) was...
The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user...
High - CVE-2024-23478 - SolarWinds Access Rights Manager (ARM) was...
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds...
Critical - CVE-2024-23479 - SolarWinds Access Rights Manager (ARM) was...
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to...
NA - CVE-2024-25123 - MSS (Mission Support System) is an open source...
MSS (Mission Support System) is an open source package designed for planning atmospheric research flights. In file: `index.py`, there is a method that is vulnerable to path manipulation attack. By...
NA - CVE-2023-40100 - In discovery_thread of Dns64Configuration.cpp,...
In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with no additional execution...
NA - CVE-2023-40104 - In ca-certificates, there is a possible way to...
In ca-certificates, there is a possible way to read encrypted TLS data due to untrusted cryptographic certificates. This could lead to remote information disclosure with no additional execution...
In backupAgentCreated of ActivityManagerService.java, there is a possible way to leak sensitive data due to a missing permission check. This could lead to local information disclosure with no...
In sanitizeSbn of NotificationManagerService.java, there is a possible way to launch an activity from the background due to BAL Bypass. This could lead to local escalation of privilege with no...
NA - CVE-2023-40107 - In ARTPWriter of ARTPWriter.cpp, there is a...
In ARTPWriter of ARTPWriter.cpp, there is a possible use after free due to uninitialized data. This could lead to local escalation of privilege with no additional execution privileges needed. User...