GHSA-V778-237X-GJRC vulnerabilities

Vulnerabilities for packages: filebrowser, kube-metrics-adapter, mongo-tools, crossplane-provider-aws-sqs, flux-source-controller, croc, local-static-provisioner, crossplane-provider-sql, docker, docker-compose, fscrypt, policy-controller, undock, dex, terraform-provider-azurerm, trillian, wgcf,...

CVE-2024-42448

From the VSPC management agent machine, under condition that the management agent is authorized on the server, it is possible to perform Remote Code Execution RCE on the VSPC server machine...

CVE-2024-42448

CVE-2024-42448 affects Veeam Service Provider Console (VSPC). From the VSPC management agent machine, when the agent is authorized on the server, an attacker can achieve Remote Code Execution (RCE) on the VSPC server. The CVSS v3.0 base score is 9.9 (CRITICAL) with Network attack vector, Low atta...

openSUSE 15 Security Update : zabbix (openSUSE-SU-2024:0384-1)

The remote openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2024:0384-1 advisory. Zabbix was updated to 6.0.33: - this version fixes CVE-2024-36461 and CVE-2024-22114 - New Features and Improvements + ZBXNEXT-9000 Changed query...

Ivanti Releases Security Updates for Multiple Products

Ivanti released security updates to address vulnerabilities in Ivanti Cloud Service Application, Ivanti Desktop and Server Management DSM, Ivanti Connect Secure and Police Secure, Ivanti Sentry, and Ivanti Patch SDK. CISA encourages users and administrators to review the following Ivanti security...

Debian dla-3984 : zabbix-agent - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3984 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3984-1 [email protected]...

The Real Story of “The Order”

The new film about an FBI agent chasing a white supremacist terror cell is based on a true story—and one that connects the headlines of 40 years ago to those of today...

CVE-2024-21571

Snyk has identified a remote code execution RCE vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code within the Code Agent container. Exploiting this vulnerability would require an attacker to have network access to the Code Agent within the...

CVE-2024-21571

Snyk has identified a remote code execution RCE vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code within the Code Agent container. Exploiting this vulnerability would require an attacker to have network access to the Code Agent within the...

CVE-2024-21571

CVE-2024-21571 involves a remote code execution (RCE) in all versions of Code Agent. The vulnerability allows arbitrary code execution inside the Code Agent container. Exploitation requires network access to the Code Agent within the deployment environment. External exploitation is considered unl...

CVE-2024-21571

Snyk has identified a remote code execution RCE vulnerability in all versions of Code Agent. The vulnerability enables an attacker to execute arbitrary code within the Code Agent container. Exploiting this vulnerability would require an attacker to have network access to the Code Agent within the...

Vulnerabilities fixed in Veeam Backup & Replication

Veeam has fixed vulnerabilities in Veeam Backup & Replication. The vulnerabilities in Veeam Backup & Replication allow low-privileged users to remotely execute code, extract stored credentials in plain text, launch an agent in server mode, manipulate configurations within the virtual...

Incorrect Default Permissions

Kolide Agent is vulnerable to Incorrect Default Permissions. The vulnerability is due to improper permissions set on the ProgramData directory for upgraded binaries and the omission of the SystemDrive environmental variable, allowing a malicious actor to place and execute arbitrary DLLs within th...

SQL Injection to RCE on FinanceChatLlamaPack

Summary The Finance Chat Llama Pack implements a hierarchical agent based on LLM for financial chat and information extraction. It includes an agent called 'database agent' for interacting with a PostgreSQL database. However, due to the lack of protections in the runsqlquery function on the...

Trend Micro Deep Security Agent for Windows and Deep Security Notifier on DSVA vulnerable to OS command injection

Overview Trend Micro Incorporated has released the security updates for Deep Security Agent for Windows and Deep Security Notifier on DSVA for Windows VM to fix an OS command injection vulnerability CWE-78, CVE-2024-48903. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notif...

Snyk Code Agent 安全漏洞

Snyk Code Agent is an agent from Snyk open source. A security vulnerability exists in Snyk Code Agent. An attacker exploiting this vulnerability could execute arbitrary code inside the Code Agent container...

PT-2024-9986 · Acronis · Acronis Cyber Protect Cloud Agent

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect Cloud Agent Linux before build 39185 Description: The issue is related to the use of a weak algorithm for signing RPM packages in the Acronis Cyber Protect Cloud Agent for Linux. This weakness can potentially allow an...

The vulnerability of the application for launching Puppet Agent, related to resource management errors, allows a hacker to trigger a service failure.

The vulnerability of the application for launching Puppet Agent is related to resource management errors. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2025-25240 · Trend Micro · Trend Micro Apex One

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One security agent affected versions not specified Description: An uncontrolled search path issue allows a local attacker to escalate privileges on affected installations, but the attacker must first obtain the ability to...

Palo Alto GlobalProtect Agent Privilege Escalation (CVE-2024-5921)

According to its self-reported version, the Palo Alto GlobalProtect Agent installed on the remote host is affected by a vulnerability as referenced in the CVE-2024-5921 advisory: - An insufficient certification validation issue in the Palo Alto Networks GlobalProtect app enables attackers to...