CVE-2024-10944

A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed...

CVE-2024-10944 FactoryTalk® Updater Remote Code Execution

A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed...

CVE-2024-10944 FactoryTalk® Updater Remote Code Execution

A Remote Code Execution vulnerability exists in the affected product. The vulnerability requires a high level of permissions and exists due to improper input validation resulting in the possibility of a malicious Updated Agent being deployed...

CVE-2024-10944

CVE-2024-10944 affects Rockwell Automation FactoryTalk Updater Client prior to 4.20.0. It is a Remote Code Execution vulnerability caused by improper input validation that could allow a malicious Updated Agent to be deployed; exploitation requires high privileges and user interaction. Remediation...

CVE-2024-47595 Local Privilege Escalation in SAP Host Agent

An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application...

CVE-2024-47595 Local Privilege Escalation in SAP Host Agent

An attacker who gains local membership to sapsys group could replace local files usually protected by privileged access. On successful exploitation the attacker could cause high impact on confidentiality and integrity of the application...

CVE-2024-47595

CVE-2024-47595 is a Local Privilege Escalation in SAP Host Agent. An attacker with membership in the sapsys group can replace local files usually protected by privileged access, impacting confidentiality and integrity of the application. Public details present in multiple sources confirm the loca...

RHEL 9 : postfix (RHSA-2024:9243)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:9243 advisory. The postfix packages provide a Mail Transport Agent MTA, which supports protocols like LDAP, SMTP AUTH SASL, and TLS. Security Fixes: postfix: SMTP...

Rockwell Automation FactoryTalk Updater 安全漏洞

Rockwell Automation FactoryTalk Updater is a secure tool from Rockwell Automation, Inc. for managing Rockwell Automation software versions and activations on networked computers. A security vulnerability exists in Rockwell Automation FactoryTalk Updater versions prior to v4.20.00 that stems from...

PT-2024-16655 · Rockwell Automation · Rockwell Automation

Name of the Vulnerable Software and Affected Versions: Rockwell Automation products affected versions not specified Description: A Remote Code Execution issue exists due to improper input validation, allowing the possibility of a malicious Updated Agent being deployed. This issue requires a high...

SAP Host Agent 安全漏洞

SAP Host Agent is a suite of agent programs from SAP, Germany, that support a number of lifecycle management tasks such as operating system monitoring, database monitoring, and system instance monitoring. A security vulnerability exists in SAP Host Agent version 7.22, which stems from a local...

IObit Driver Booster 安全漏洞

IObit Driver Booster is a driver updater from IObit. A security vulnerability exists in IObit Driver Booster version v10.6, which stems from a buffer overflow issue that was found to be contained via the Host parameter under the Custom Agent module...

Arbitrary file deletion on Windows via the '/v1/agent/hub/update' endpoint.

This report is not public...

CVE-2024-10203

Zohocorp ManageEngine EndPoint Central versions 11.3.2416.21 and below, 11.3.2428.9 and below are vulnerable to Arbitrary File Deletion in the agent installed machines...

CVE-2024-10203

CVE-2024-10203 affects Zohocorp/ManageEngine Endpoint Central. Vulnerable components are the Endpoint Central agent on Windows machines, with version ranges 11.3.2416.21 and below and 11.3.2428.9 and below. root cause is described as insecure privilege management that enables Arbitrary File Delet...

CVE-2024-20484

A vulnerability in the External Agent Assignment Service EAAS feature of Cisco Enterprise Chat and Email ECE could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to insufficient validation of Media Routing...

CVE-2024-20484

CVE-2024-20484 affects Cisco Enterprise Chat and Email (ECE) External Agent Assignment Service (EAAS). The root cause is insufficient validation of MR PIM traffic, allowing an unauthenticated remote attacker to trigger a MR PIM connection failure between ECE and Cisco Unified Contact Center Enter...

Trend Micro Deep Security 20 Agent for Windows vulnerable to improper access control

Overview Trend Micro Incorporated has released a security update for Deep Security 20 Agent for Windows to fix a improper access control vulnerability CVE-2024-48903. Trend Micro Incorporated reported this vulnerability to JPCERT/CC to notify users of the solution through JVN. Impact A...

UBUNTU-CVE-2024-50095

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acquires/releases madagentpriv lock for every timed out WRs. This causes heavy locking contention when higher no. of WRs are to be...

CVE-2024-50095 RDMA/mad: Improve handling of timed out WRs of mad agent

In the Linux kernel, the following vulnerability has been resolved: RDMA/mad: Improve handling of timed out WRs of mad agent Current timeout handler of mad agent acquires/releases madagentpriv lock for every timed out WRs. This causes heavy locking contention when higher no. of WRs are to be...