9660 matches found
Malicious code in chart_type_multi_monitor (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-1974 Malicious code in chart_type_multi_monitor (npm)
--- -= Per source details. Do not edit below this line.=-...
Linux kernel security vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor announcements...
PT-2024-37296 · Rockwell Automation · Rockwell Automation Thinserver
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ThinServer affected versions not specified Description: The issue is caused by improper input validation, allowing an unauthenticated threat actor to send a malicious message to a monitor thread and cause a denial-of-servi...
CVE-2024-5990: Improper Input Validation
Due to an improper input validation, an unauthenticated threat actor can send a malicious message to a monitor thread within Rockwell Automation ThinServer™ and cause a denial-of-service condition on the affected device...
Rockwell Automation ThinServer 安全漏洞
Rockwell Automation ThinManager is a thin client management software from Rockwell Automation, Inc. It allows thin clients to be assigned to multiple remote desktop servers simultaneously. An input validation error vulnerability exists in Rockwell Automation ThinManager ThinServer, which can be...
SUSE CVE-2022-48752
In the Linux kernel, the following vulnerability has been resolved: powerpc/perf: Fix powerpmudisable to call clearpmiirqpending only if PMI is pending Running selftest with CONFIGPPCIRQSOFTMASKDEBUG enabled in kernel triggered below warning: 172.851380 ------------ cut here ------------ 172.8513...
UBUNTU-CVE-2022-48750
In the Linux kernel, the following vulnerability has been resolved: hwmon: nct6775 Fix crash in clearcaseopen Paweł Marciniak reports the following crash, observed when clearing the chassis intrusion alarm. BUG: kernel NULL pointer dereference, address: 0000000000000028 PGD 0 P4D 0 Oops: 0000 1...
PT-2024-11794 · Linux +2 · Linux Kernel +2
Name of the Vulnerable Software and Affected Versions: Linux kernel version 5.16.2-200.fc35.x86 64 Description: The issue is related to a NULL pointer dereference in the Linux kernel, specifically in the hwmon component. This occurs when the clear caseopen function is called with the wrong device...
Error "Invalid Client ID/Secret key" throws while configuring Probe Agent for Cloud Monitor
While configuring Citrix Probe Agent for Cloud Monitor it throws error "Invalid Client ID/Secret key" although Client ID, Secret and Customer ID are correct...
Azure Monitor Agents Link Privilege Escalation
The vulnerability of the data collection tool for Azure Monitor Agents, which are used for monitoring virtual machines and physical servers, is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability could allow attackers to increase their privilege...
CVE-2024-36969
A vulnerability was found in the setupdscconfig function in the Linux kernel, where a lack of proper checks could lead to a divide-by-zero scenario caused when the variable sliceheight is 0. This issue could lead to crashes. Mitigation Mitigation for this issue is either not available or the...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in Azure products. A malicious party could exploit the vulnerabilities to cause a denial-of-service, or to grant themselves elevated privileges and potentially perform actions with administrator privileges. The most serious vulnerability has been assigned...
Only one critical issue disclosed as part of Microsoft Patch Tuesday
Microsoft released its monthly security update Tuesday, disclosing 49 vulnerabilities across its suite of products and software. Of those there is only one critical vulnerability. Every other security issues disclosed this month is considered "important." The lone critical security issue is...
CVE-2024-35254
Azure Monitor Agent Elevation of Privilege Vulnerability...
CVE-2024-35254
Azure Monitor Agent Elevation of Privilege Vulnerability...
CVE-2024-35254 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2024-35254 Azure Monitor Agent Elevation of Privilege Vulnerability
...
CVE-2024-35254
CVE-2024-35254 is an Elevation of Privilege vulnerability in the Azure Monitor Agent . The CVSSv3.1 base score is 7.1 ( HIGH ), with a LOCAL attack vector, LOW attack complexity, LOW privileges required, and NO user interaction. The impact is Integrity: HIGH and Availability: HIGH ; Confidentiali...
