Lucene search
+L

20611 matches found

Vulnrichment
Vulnrichment
added 2024/06/12 4:20 p.m.19 views

CVE-2024-5905 Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechanisms using this vulnerability...

2CVSS6.6AI score0.00089EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/12 4:20 p.m.76 views

CVE-2024-5905

The CVE-2024-5905 issue concerns the Palo Alto Networks Cortex XDR Agent (Windows). A flaw in the agent’s protection mechanism allows a local, low-privileged Windows user to disrupt some agent functionality, without defeating the protection mechanisms themselves. The available sources identify th...

4.4CVSS4.6AI score0.00089EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.10 views

Dell Common Event Enabler 代码问题漏洞

The Dell Common Event Enabler is used to provide a working environment for the Common Antivirus Agent CAVA and Common Event Publishing Agent CEPA programs. A deserialization vulnerability exists in Dell Common Event Enabler. A local attacker could exploit this vulnerability to cause arbitrary cod...

7.8CVSS6.9AI score0.00357EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.9 views

Palo Alto Networks Cortex XDR Security Vulnerability

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A security vulnerability exists in the Palo Alto Networks Cortex XDR Agent Windows that stems from a security issue in...

4.4CVSS6.6AI score0.00089EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.10 views

Palo Alto Networks Cortex XDR Security Vulnerability

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from U.S.-based Palo Alto Networks. A security vulnerability exists in the Palo Alto Networks Cortex XDR Agent Windows, which stems from a faulty...

6.8CVSS6.7AI score0.0041EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.15 views

PT-2024-4315 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: The issue is related to a flaw in the source confirmation mechanism of the Palo Alto Networks Cortex XDR Agent, which can be exploited to impact the system's...

4.4CVSS6.7AI score0.00089EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2024/06/12 12:00 a.m.9 views

Palo Alto Networks Cortex XDR Security Vulnerability

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, Inc. in the United States. A security vulnerability exists in Palo Alto Networks Cortex XDR Agent Windows that originates...

7CVSS6.8AI score0.0013EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.11 views

PT-2024-4210 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: The issue is related to insecure privilege management in the Palo Alto Networks Cortex XDR Agent, which can be exploited to cause a denial of service. A problem...

6.8CVSS6.9AI score0.0041EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/06/12 12:00 a.m.22 views

PT-2024-4212 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: A privilege escalation vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute programs with elevated...

7CVSS7.4AI score0.0013EPSS
SaveExploits0References7
Wolfi
Wolfi
added 2024/06/11 5:16 p.m.126 views

CVE-2024-35255 vulnerabilities

Vulnerabilities for packages: flyte, restic, chezmoi, sqlpad, sops, terragrunt, goreleaser, timestamp-authority, airflow, fulcio, policy-controller, opentelemetry-collector-contrib, wal-g, buildkitd, k8sgpt, druid, kubescape, prometheus-operator, secrets-store-csi-driver-provider-azure, tkn,...

5.5CVSS6.3AI score0.0083EPSS
SaveExploits0
OSV
OSV
added 2024/06/11 5:16 p.m.15 views

CVE-2024-35254

Azure Monitor Agent Elevation of Privilege Vulnerability...

7.1CVSS5.8AI score0.00826EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/11 5:16 p.m.38 views

CVE-2024-35254

Azure Monitor Agent Elevation of Privilege Vulnerability...

7.1CVSS0.00826EPSS
SaveExploits0References1
CVE
CVE
added 2024/06/11 5:00 p.m.96 views

CVE-2024-35254

CVE-2024-35254 is an Elevation of Privilege vulnerability in the Azure Monitor Agent . The CVSSv3.1 base score is 7.1 ( HIGH ), with a LOCAL attack vector, LOW attack complexity, LOW privileges required, and NO user interaction. The impact is Integrity: HIGH and Availability: HIGH ; Confidentiali...

7.1CVSS7.1AI score0.00826EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/06/11 5:00 p.m.47 views

CVE-2024-35254 Azure Monitor Agent Elevation of Privilege Vulnerability

...

7.1CVSS0.00826EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/06/11 5:00 p.m.26 views

CVE-2024-35254 Azure Monitor Agent Elevation of Privilege Vulnerability

...

7.1CVSS6.9AI score0.00826EPSS
SaveExploits0References1
Microsoft Security Update
Microsoft Security Update
added 2024/06/11 5:00 p.m.15 views

Azure File Sync Agent v17.3 Release – June 2024 (KB5039814)

Security Update for Azure File Sync agent version 17.3.0.0. For more details, see the associated Microsoft Knowledge Base article...

7.3AI score
SaveExploits0
Microsoft KB
Microsoft KB
added 2024/06/11 2:00 p.m.38 views

Azure File Sync Agent v18.1 Release - June 2024 (Security-only update)

None None...

4.4CVSS5.8AI score0.00744EPSS
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
added 2024/06/11 11:47 a.m.6 views

Malicious code in noblox.js-proxy-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49cb85854d6a908a38177c4a3c30ac7dd724e1f892e3fbfcb26bb3a146ad2dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

6.9AI score
SaveExploits0References3
OSV
OSV
added 2024/06/11 11:47 a.m.16 views

MAL-2024-1582 Malicious code in noblox.js-proxy-agent (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 49cb85854d6a908a38177c4a3c30ac7dd724e1f892e3fbfcb26bb3a146ad2dc7 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

7AI score
SaveExploits0References3
GithubExploit
GithubExploit
added 2024/06/11 7:21 a.m.585 views

Exploit for Code Injection in Rejetto Http_File_Server

CVE-2024-23692 BURP POC GET /?n=%0A&cmd=ipconfig+/all&sea...

9.8CVSS9.7AI score0.99471EPSS
SaveExploits21
Rows per page
Query Builder