Septembre 2024

PTZOptics PT30X-SDI · PTZOptics PT30X-NDI · ptzoptics pt30x-sdi_firmware · ptzoptics pt30x-ndi_firmware

PTZOptics PT30X-SDI/NDI-xx before firmware 6.3.40 is vulnerable to an OS command injection issue. The camera does not sufficiently validate the ntp_addr configuration value which may lead to arbitrary command execution when ntp_client is started. When chained with CVE-2024-8956, a remote and unauthenticated attacker can execute arbitrary OS commands on affected devices.

Ivanti CSA (Cloud Services Appliance) · ivanti endpoint_manager_cloud_services_appliance · Ivanti cloud services appliance

An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.

Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

Windows MSHTML Platform Spoofing Vulnerability

Microsoft Office 2019 · Microsoft Office LTSC 2021 · Microsoft Publisher 2016 · Microsoft office long term servicing channel

Microsoft Publisher Security Feature Bypass Vulnerability

Microsoft Windows 10 Version 1507 · Microsoft Windows 10 Version 1607 · Microsoft Windows 10 Version 1809 · Microsoft Windows 10 Version 21H2

Windows Installer Elevation of Privilege Vulnerability