20608 matches found
CVE-2024-44575
CVE-2024-44575 affects RELY-PCIe versions 22.2.1–23.1.0. The issue is that the Secure attribute is not set for sensitive cookies in HTTPS sessions, which could allow a user agent to send cookies in cleartext over an HTTP session. The vulnerability is documented with a CVSS v3.1 base score of 3.7 ...
VICIdial 2.14-917a Remote Code Execution Vulnerability
An attacker with authenticated access to VICIdial version 2.14-917a as an agent can execute arbitrary shell commands as the root user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective. Title: VICIdial Authenticated Remo...
Palo Alto Networks Cortex XDR 安全漏洞
Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks Cortex XDR that stems from an issue with the detection mechanism...
CVE-2024-8441
An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local authenticated attacker with admin privileges to escalate their privileges to SYSTEM...
CVE-2024-8504
An attacker with authenticated access to VICIdial as an "agent" can execute arbitrary shell commands as the "root" user. This attack can be chained with CVE-2024-8503 to execute arbitrary shell commands starting from an unauthenticated perspective...
CVE-2024-8504
CVE-2024-8504 is an authenticated Remote Code Execution in VICIdial (v2.14-917a) via OS command injection. An attacker with agent-level access can run commands as root; the issue can be chained with CVE-2024-8503 (unauthenticated SQLi) to escalate from unauthenticated context. Public sources conf...
CVE-2024-43470
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
CVE-2024-43470
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
CVE-2024-38188
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
CVE-2024-38188
Azure Network Watcher VM Agent Elevation of Privilege Vulnerability...
CVE-2024-43470 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
...
CVE-2024-43470 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
...
CVE-2024-38188 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
...
CVE-2024-38188
CVE-2024-38188 affects Microsoft Azure Network Watcher VM Extension (Windows). Reports from Nessus plugins and advisories indicate an elevation of privilege vulnerability in the Azure Network Watcher VM Agent/Extension prior to specific updated versions (e.g., 1.4.3563.1 and 1.4.3422.1 in differe...
CVE-2024-38188 Azure Network Watcher VM Agent Elevation of Privilege Vulnerability
...
DEBIAN-CVE-2024-23185
Very large headers can cause resource exhaustion when parsing message. The message-parser normally reads reasonably sized chunks of the message. However, when it feeds them to message-header-parser, it starts building up "fullvalue" buffer out of the smaller chunks. The fullvalue buffer has no si...
AZL-49024 CVE-2024-23184 affecting package dovecot 2.3.20-1
Having a large number of address headers From, To, Cc, Bcc, etc. becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors...
DEBIAN-CVE-2024-23184
Having a large number of address headers From, To, Cc, Bcc, etc. becomes excessively CPU intensive. With 100k header lines CPU usage is already 12 seconds, and in a production environment we observed 500k header lines taking 18 minutes to parse. Since this can be triggered by external actors...
