20521 matches found
CVE-2024-51461 IBM QRadar WinCollect Agent denial of service
IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources...
CVE-2024-51461
IBM QRadar WinCollect Agent 10.0–10.1.13 is affected by CVE-2024-51461, where a remote attacker can cause denial of service by interrupting an HTTP request that could consume memory resources. The issue is documented by multiple sources (IBM bulletin, Red Hat cve entry, PTSecurity) and affects QR...
CVE-2024-51461 IBM QRadar WinCollect Agent denial of service
IBM QRadar WinCollect Agent 10.0 through 10.1.13 could allow a remote attacker to cause a denial of service by interrupting an HTTP request that could consume memory resources...
Palo Alto Networks Cortex XDR Agent 代码问题漏洞
Palo Alto Networks Cortex XDR Agent is an endpoint security software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Cortex XDR Agent that stems from a null pointer dereference that could cause a low-privileged user to crash the agent...
PT-2025-16113 · Debian +1 · Debian +1
Name of the Vulnerable Software and Affected Versions: Taegis Endpoint Agent Linux versions prior to 1.3.10 Description: A code injection issue in the Debian package component allows local users to execute arbitrary code as root. This issue does not affect Redhat-based systems that use RPM...
Citrix Virtual Apps and Desktops 2407 : Sophos Endpoint Agent gets loaded into ICA user session
Published app sessions are getting loaded with Sophos Endpoint Agent. This is seen under Workspace app Connection Center. Sophos Endpoint agent is getting loaded into all the Citrix ICA sessions. Citrix Workspace app Connection Center shows the "Sophos Endpoint Agent - Notification Icon". Sophos...
FreeBSD : jenkins -- multiple vulnerabilities (45276ea6-1653-4240-9986-ccfc6fec7ece)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the 45276ea6-1653-4240-9986-ccfc6fec7ece advisory. Jenkins Security Advisory: Missing permission check allows retrieving agent configurations...
IBM QRadar WinCollect Agent 安全漏洞
IBM QRadar WinCollect Agent is an agent program from International Business Machines IBM that collects and sends Windows event logs. A security vulnerability exists in IBM QRadar WinCollect Agent version 10.1.13 and earlier, which originates from a remote attacker who could cause a denial of...
Secureworks Taegis Endpoint Agent 安全漏洞
Secureworks Taegis Endpoint Agent is a security platform from US-based Secureworks. A security vulnerability exists in Secureworks Taegis Endpoint Agent versions prior to 1.3.10, which stems from a code injection that could cause a local user to execute arbitrary code with root privileges...
Security Bulletin: IBM QRadar Wincollect agent is vulnerable to denial of service ( CVE-2024-51461)
Summary IBM QRadar Wincollect agent is vulnerable to denial of service. The vulnerability have been addressed in the latest update. Vulnerability Details CVEID:CVE-2024-51461 DESCRIPTION: IBM QRadar WinCollect Agent could allow a remote attacker to cause a denial of service by interrupting an HTT...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: go-md2man, mage, snyk-cli, esbuild, grafana-mimir, nri-f5, gosu, opencost, terraform-provider-pagerduty, opentelemetry-operator, newrelic-fluent-bit-output, cargobump, kube-rbac-proxy, libnvidia-container, gomplate, spire-server,...
GHSA-G9PC-8G42-G6VQ vulnerabilities
Vulnerabilities for packages: go-md2man, mage, snyk-cli, esbuild, grafana-mimir, nri-f5, gosu, opencost, terraform-provider-pagerduty, opentelemetry-operator, newrelic-fluent-bit-output, cargobump, kube-rbac-proxy, libnvidia-container, gomplate, spire-server,...
CVE-2025-22871 vulnerabilities
Vulnerabilities for packages: opensearch-k8s-operator, gobuster, neuvector-scanner, overmind, spark-operator-fips, terraform-provider-tls, kubernetes-dashboard-metrics-scraper, cert-manager-cmctl-fips, prometheus-mysqld-exporter, terraform-provider-acme-fips, helm-docs, ko-fips, kaniko,...
CVE-2025-32754
In jenkins/ssh-agent Docker images 6.11.1 and earlier, SSH host keys are generated on image creation for images based on Debian, causing all containers based on images of the same version use the same SSH host keys, allowing attackers able to insert themselves into the network path between the SS...
CVE-2025-29985
Dell Common Event Enabler, versions CEE 9.0.0.0, contains an Initialization of a Resource with an Insecure Default vulnerability in the Common Anti-Virus Agent CAVA. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Unauthorized access...
GOFFEE continues to attack organizations in Russia
GOFFEE is a threat actor that first came to our attention in early 2022. Since then, we have observed malicious activities targeting exclusively entities located in the Russian Federation, leveraging spear phishing emails with a malicious attachment. Starting in May 2022 and up until summer of...
CVE-2025-32728
A flaw was found in OpenSSH. In affected versions of sshd, the DisableForwarding directive does not fully adhere to the intended functionality as documented. Specifically, it fails to disable X11 and agent forwarding, which may allow unintended access under certain configurations. Mitigation To...
AZL-59888 CVE-2025-32728 affecting package openssh for versions less than 9.8p1-4
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding...
AZL-59775 CVE-2025-32728 affecting package openssh for versions less than 8.9p1-8
In sshd in OpenSSH before 10.0, the DisableForwarding directive does not adhere to the documentation stating that it disables X11 and agent forwarding...
