37 matches found
CVE-2024-26898 aoe: fix the potential use-after-free problem in aoecmd_cfg_pkts
In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function...
CVE-2024-26898
Summary: CVE-2024-26898 relates to the AoE driver in the Linux kernel where aoecmd_cfg_pkts() incorrectly handled the refcnt of net_device, enabling a potential use-after-free via racing with tx paths. The issue has been resolved by patch f98364e92662, which stops calling dev_put(ifp) in the succ...
CVE-2024-26898
In the Linux kernel, the following vulnerability has been resolved: aoe: fix the potential use-after-free problem in aoecmdcfgpkts This patch is against CVE-2023-6270. The description of cve is: A flaw was found in the ATA over Ethernet AoE driver in the Linux kernel. The aoecmdcfgpkts function...
CVE-2022-26898
creationtimestamp| type| source ---|---|--- 2022-04-15 22:20:36+00:00| seen| https://t.me/cibsecurity/40907...
CVE-2022-26898
Azure Site Recovery Remote Code Execution Vulnerability...
CVE-2022-26898
Azure Site Recovery Remote Code Execution Vulnerability...
CVE-2022-26898 Azure Site Recovery Remote Code Execution Vulnerability
...
CVE-2022-26898
CVE-2022-26898 affects Microsoft Azure Site Recovery. The vulnerability enables Remote Code Execution in the Azure Site Recovery installation, stemming from input handling in the vulnerable component and allowing an attacker to execute arbitrary commands on the remote host. Root cause details ind...
Vulnerabilities fixed in Microsoft Azure
Microsoft has fixed vulnerabilities in supporting products of Azure. A malicious party could potentially exploit them to appropriate elevated privileges and gain access gain access to sensitive data. The vulnerabilities in Azure Site Recovery are located specifically in the VMWare-to-Azure and...
CVE-2021-26898
creationtimestamp| type| source ---|---|--- 2021-03-11 18:54:53+00:00| seen| https://t.me/cibsecurity/24777...
KB5000807: Windows 10 March 2021 Security Update
The remote Windows host is missing security update 5000807. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-26862, CVE-2021-26866, CVE-2021-26868, CVE-2021-26871,...
KB5000853: Windows 8.1 and Windows Server 2012 R2 March 2021 Security Update
The remote Windows host is missing security update 5000853 or cumulative update 5000848. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability. An attacker can exploit this to bypass authentication and execute unauthorized arbitrary commands...
KB5000808: Windows 10 Version 1909 March 2021 Security Update
The remote Windows host is missing security update 5000808. It is, therefore, affected by multiple vulnerabilities : - An elevation of privilege vulnerability. An attacker can exploit this to gain elevated privileges. CVE-2021-1640, CVE-2021-1729, CVE-2021-24090, CVE-2021-24095, CVE-2021-26860,...
KB5000809: Windows 10 Version 1803 March 2021 Security Update
The remote Windows host is missing security update 5000809. It is, therefore, affected by multiple vulnerabilities : - An information disclosure vulnerability. An attacker can exploit this to disclose potentially sensitive information. CVE-2021-24107, CVE-2021-26869, CVE-2021-26884 - An memory...
CVE-2020-26898
NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings...
CVE-2020-26898
NETGEAR RAX40 devices before 1.0.3.80 are affected by incorrect configuration of security settings...
CVE-2020-26898
CVE-2020-26898 affects NETGEAR RAX40 devices running versions prior to 1.0.3.80 , due to an incorrect configuration of security settings . The vulnerability entry cites a high-risk impact (confidentiality, integrity, and availability potentially affected) and does not provide explicit exploitatio...