20611 matches found
Amazon Linux 2 : ecs-service-connect-agent (ALASECS-2024-037)
The version of ecs-service-connect-agent installed on the remote host is prior to v1.29.5.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2024-037 advisory. Envoy is a cloud-native, open source edge and service proxy. A theoretical request smuggling...
The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, arises from insecure privilege management. This allows attackers to trigger service interruptions.
The vulnerability of the Palo Alto Networks Cortex XDR Agent, which is used for network traffic analysis, network detection, and response, relates to insecure privilege management. Exploiting this vulnerability could allow attackers to trigger service failures...
The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, arises from insecure privilege management. This allows attackers to escalate their privileges.
The vulnerability of the Palo Alto Networks Cortex XDR Agent, a tool for network traffic analysis, network detection, and response, is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...
Multiple vulnerabilities in multiple Trend Micro products
Overview Trend Micro Incorporated has released security updates for multiple Trend Micro products. Trend Micro Incorporated reported these vulnerabilities to JPCERT/CC to notify users of the solutions through JVN. Impact Apex One 2019 On-prem, Apex One as a Service Local privilege escalation due ...
HUMINT in a cyber world
TL;DR HUMINT / Human Intelligence is gathered from a person in the location in question. It’s the sort of information we think of in the context of spying. A modern intelligence apparatus is multi-discipline with many different collection methods. HUMINT sources include officers, agents, diplomat...
Error "Invalid Client ID/Secret key" throws while configuring Probe Agent for Cloud Monitor
While configuring Citrix Probe Agent for Cloud Monitor it throws error "Invalid Client ID/Secret key" although Client ID, Secret and Customer ID are correct...
VIPRE Advanced Security PMAgent Uncontrolled Search Path Element Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Patch...
VIPRE Advanced Security PMAgent Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of VIPRE Advanced Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the Patch...
The vulnerability of the Git-based software platform for collaborative code development on GitLab, related to the manipulation of inter-site requests, allows a perpetrator to carry out a CSRF attack.
The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to the manipulation of inter-site requests. Exploiting this vulnerability allows a malicious actor to perform a CSRF attack through the Kubernetes Agent Server...
PT-2024-5728 · Citrix · Citrix Virtual Delivery Agent For Windows +2
Name of the Vulnerable Software and Affected Versions: Citrix Virtual Delivery Agent for Windows affected versions not specified Description: The issue is related to insecure privilege management in the Virtual Delivery Agent for Windows component of Citrix Virtual Apps and Desktops and Citrix...
PT-2024-35424
Name of the Vulnerable Software and Affected Versions FileCatalyst Direct versions 3.8.10 Build 138 and earlier FileCatalyst Workflow versions 5.1.6 Build 130 and earlier Description A hard-coded password in the FileCatalyst TransferAgent can be used to unlock the keystore, allowing access to its...
The vulnerability of the Veeam Agent for Microsoft Windows data backup tool stems from authentication procedures that have flaws, allowing attackers to exploit their privileges.
The vulnerability of the Veeam Agent for Microsoft Windows data backup tool is related to deficiencies in the authentication process. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2024-37891 vulnerabilities
Vulnerabilities for packages: kubeflow-volumes-web-app, kubeflow-katib, kubeflow-pipelines-visualization-server, kubeflow-jupyter-web-app, kubeflow-pipelines, py3-urllib3, az, nemo, py3-cassandra-medusa, ggshield, nvidia-nsight-compute-13.2, dask-gateway, reflex, py3.13-scanner-test-libraries,...
Ivanti Endpoint Manager < 2022 (CVE-2024-22058)
The version of Ivanti Endpoint Manager installed on the remote host is prior to 2022. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-22058 advisory. - A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute...
OPENSUSE-SU-2024:11785-1 keylime-agent-6.3.0-1.1 on GA media
These are all security issues fixed in the keylime-agent-6.3.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12212-1 zabbix-agent-4.0.42-1.1 on GA media
These are all security issues fixed in the zabbix-agent-4.0.42-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:12012-1 amazon-ssm-agent-3.1.1260.0-1.1 on GA media
These are all security issues fixed in the amazon-ssm-agent-3.1.1260.0-1.1 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11217-1 python-azure-agent-2.2.49.2-4.5 on GA media
These are all security issues fixed in the python-azure-agent-2.2.49.2-4.5 package on the GA media of openSUSE Tumbleweed...