Microsoft November 2024 Security Updates

Microsoft October 2024 Security Updates

Microsoft September 2024 Security Updates

Microsoft August 2024 Security Updates

Microsoft July 2024 Security Updates

Microsoft June 2024 Security Updates

Microsoft May 2024 Security Updates

Microsoft April 2024 Security Updates

Microsoft March 2024 Security Updates

Microsoft February 2024 Security Updates

Microsoft January 2024 Security Updates

pan-os

Missing Authentication for Critical Function

An authentication bypass in Palo Alto Networks PAN-OS software enables an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges to perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities like  CVE-2024-9474 https://security.paloaltonetworks.com/CVE-2024-9474 .

The risk of this issue is greatly reduced if you secure access to the management web interface by restricting access to only trusted internal IP addresses according to our recommended  best practice deployment guidelines https://live.paloaltonetworks.com/t5/community-blogs/tips-amp-tricks-how-to-secure-the-management-access-of-your-palo/ba-p/464431 .

This issue is applicable only to PAN-OS 10.2, PAN-OS 11.0, PAN-OS 11.1, and PAN-OS 11.2 software.

Cloud NGFW and Prisma Access are not impacted by this vulnerability.

An authentication bypass vulnerability exists in Palo Alto Networks PAN-OS software versions 10.2, 11.0, 11.1, and 11.2. This vulnerability allows an unauthenticated attacker with network access to the management web interface to gain PAN-OS administrator privileges. The attacker can then perform administrative actions, tamper with the configuration, or exploit other authenticated privilege escalation vulnerabilities. Cloud NGFW and Prisma Access are not affected by this vulnerability.

Choosing Message Identifier

Force the System to Reset Values

Using Unpublished Interfaces

Cross Site Request Forgery

security.paloaltonetworks.com

chrome

Access of Resource Using Incompatible Type ('Type Confusion')

Type Confusion in V8 in Google Chrome prior to 131.0.6778.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Type Confusion vulnerability in V8 in Google Chrome prior to version 131.0.6778.85 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability is classified as High severity by Chromium.

wordpress

Authentication Bypass Using an Alternate Path or Channel

The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This is due to improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function. This makes it possible for unauthenticated attackers to log in as any existing user on the site, such as an administrator, when the "Two-Factor Authentication" setting is enabled (disabled by default).

The Really Simple Security (Free, Pro, and Pro Multisite) plugins for WordPress are vulnerable to authentication bypass in versions 9.0.0 to 9.1.1.1. This vulnerability is caused by improper user check error handling in the two-factor REST API actions with the 'check_login_and_get_user' function. It affects installations where the "Two-Factor Authentication" setting is enabled, which is disabled by default.

Directory Indexing

Exploitation of Thunderbolt Protection Flaws

File and Directory Discovery

Firmware Corruption

Exploitation for Defense Evasion

Modify Authentication Process

sourcetree

This High severity RCE (Remote Code Execution) vulnerability was introduced in versions 4.2.8 of Sourcetree for Mac and 3.4.19 for Sourcetree for Windows.

This RCE (Remote Code Execution) vulnerability, with a CVSS Score of 8.8, allows an unauthenticated attacker to execute arbitrary code which has high impact to confidentiality, high impact to integrity, high impact to availability, and requires user interaction.

Atlassian recommends that Sourcetree for Mac and Sourcetree for Windows customers upgrade to latest version, if you are unable to do so, upgrade your instance to one of the specified supported fixed versions:
 Sourcetree for Mac 4.2: Upgrade to a release greater than or equal to 4.2.9
 Sourcetree for Windows 3.4: Upgrade to a release greater than or equal to 3.4.20

See the release notes ([https://www.sourcetreeapp.com/download-archives]). You can download the latest version of Sourcetree for Mac and Sourcetree for Windows from the download center ([https://www.sourcetreeapp.com/download-archives]).

This vulnerability was reported via our Penetration Testing program.

tomcat

Unchecked Error Condition

Unchecked Error Condition vulnerability in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication (formerly JASPIC) ServerAuthContext component which may throw an exception during the authentication process without explicitly setting an HTTP status to indicate failure, the authentication may not fail, allowing the user to bypass the authentication process. There are no known Jakarta Authentication components that behave in this way.

This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.0-M26, from 10.1.0-M1 through 10.1.30, from 9.0.0-M1 through 9.0.95.

Users are recommended to upgrade to version 11.0.0, 10.1.31 or 9.0.96, which fix the issue.

An Unchecked Error Condition vulnerability exists in Apache Tomcat. If Tomcat is configured to use a custom Jakarta Authentication (formerly JASPIC) ServerAuthContext component that may throw an exception during the authentication process without explicitly setting an HTTP status to indicate failure, the authentication may not fail. This could potentially allow a user to bypass the authentication process. It's important to note that there are no known Jakarta Authentication components that behave in this way.

bugzilla.redhat.com

Github Advisory

Cross-Site Request Forgery (CSRF)

Cross-Site Request Forgery (CSRF) vulnerability in 荒野无灯 Hacklog DownloadManager allows Upload a Web Shell to a Web Server.This issue affects Hacklog DownloadManager: from n/a through 2.1.4.

JSON Hijacking (aka JavaScript Hijacking)

Cross-Domain Search Timing

Cross Site Identification

django_cms

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in django CMS Association django-cms allows Cross-Site Scripting (XSS).This issue affects django-cms: 3.11.7, 3.11.8, 4.1.2, 4.1.3.

An Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability has been identified in django CMS Association's django-cms. This vulnerability allows for Cross-Site Scripting (XSS) attacks. The affected versions of django-cms are 3.11.7, 3.11.8, 4.1.2, and 4.1.3.

XSS Using MIME Type Mismatch

DOM-Based XSS

Reflected XSS

Stored XSS

Cross-Site Scripting (XSS)

AJAX Footprinting

zld_firmware

usg_flex

usg_flex_50

usg20_vpn

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

A command injection vulnerability in the IPSec VPN feature of Zyxel ATP series firmware versions from V4.32 through V5.38, USG FLEX series firmware versions from V4.50 through V5.38, USG FLEX 50(W) series firmware versions from V4.16 through V5.38, and USG20(W)-VPN series firmware versions from V4.16 through V5.38 could allow an unauthenticated attacker to execute some OS commands on an affected device by sending a crafted username to the vulnerable device. Note that this attack could be successful only if the device was configured in User-Based-PSK authentication mode and a valid user with a long username exceeding 28 characters exists.

A command injection vulnerability exists in the IPSec VPN feature of several Zyxel device series and firmware versions. This vulnerability affects Zyxel ATP series firmware versions V4.32 through V5.38, USG FLEX series firmware versions V4.50 through V5.38, USG FLEX 50(W) series firmware versions V4.16 through V5.38, and USG20(W)-VPN series firmware versions V4.16 through V5.38. The vulnerability allows an unauthenticated attacker to execute some OS commands on an affected device by sending a crafted username to the vulnerable device.

Search CVEs by ID

Trending Vulnerabilities

Latest Patch Tuesday Reports

November 2024 Patch Tuesday: 10 Critical Vulnerabilities Amid 89 CVEs

October 2024 Patch Tuesday: 10 Critical Vulnerabilities Amid 130 CVEs

September 2024 Patch Tuesday: 10 Critical Vulnerabilities Amid 86 CVEs

Browse

Be the first to know about critical vulnerabilities