CBL Mariner 2.0 Security Update: kernel (CVE-2024-50259)

The version of kernel installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-50259 advisory. - In the Linux kernel, the following vulnerability has been resolved: netdevsim: Add trailing zero to terminat...

Malicious code in webpacks-bundles-analyzer (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11494 Malicious code in webpacks-bundles-analyzer (npm)

--- -= Per source details. Do not edit below this line.=-...

[SECURITY] Fedora 41 Update: wireshark-4.4.2-1.fc41

Wireshark allows you to examine protocol data stored in files or as it is captured from wired or wireless WiFi or Bluetooth networks, USB devices, and many other sources. It supports dozens of protocol capture file formats and understands more than a thousand protocols. It has many powerful...

The vulnerability of the FiveCo RAP traffic analyzer of Wireshark allows a hacker to cause a service failure.

The vulnerability of the FiveCo RAP traffic analyzer of Wireshark relates to the execution of a loop with an unavailable exit condition. Exploiting this vulnerability can allow attackers to cause service failures by injecting specially crafted packets or capture files...

Important: Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0

Red Hat Trusted Profile Analyzer 1.2.0 release Red Hat Product Security has rated this update as having a security impact of Moderate Red Hat Trusted Profile Analyzer 1.2.0...

Important: Red Hat Security Advisory: Red Hat Trusted Profile Analyzer 1.2.0

Red Hat Trusted Profile Analyzer 1.2.0 release Red Hat Product Security has rated this update as having a security impact of Moderate Red Hat Trusted Profile Analyzer 1.2.0...

The vulnerability of the web server used by the monitoring and network traffic analysis software in SINEC Traffic Analyzer allows a hacker to access confidential information.

The vulnerability of the web server of the monitoring and network traffic analysis software in industrial networks, SINEC Traffic Analyzer, is related to improper security checks for standard elements. Exploiting this vulnerability can allow a malicious actor to gain access to confidential...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, arises from the lack of access control over files. This allows a hacker to modify the file system of the container.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to insecure management of privileges. Exploiting this vulnerability could allow a malicious actor to modify the file system of the container remotely...

The vulnerability of the software for monitoring and analyzing network traffic in industrial networks, SINEC Traffic Analyzer, is related to deficiencies in access control. This vulnerability allows a intruder to gain unauthorized access to protected information.

The vulnerability of the SINEC Traffic Analyzer software for monitoring and analyzing network traffic in industrial networks is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

CVE-2024-6068 Input Validation Vulnerability exists in Arena® Input Analyzer

A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can exploit this issue to disclose information and to execute arbitrary code. To exploit this vulnerability a legitimate user must open a malicious DFT file...

CVE-2024-6068 Input Validation Vulnerability exists in Arena® Input Analyzer

A memory corruption vulnerability exists in the affected products when parsing DFT files. Local threat actors can exploit this issue to disclose information and to execute arbitrary code. To exploit this vulnerability a legitimate user must open a malicious DFT file...

PT-2024-37362 · Rockwell Automation · Arena

Name of the Vulnerable Software and Affected Versions: Rockwell Automation Arena Input Analyzer affected versions not specified Description: A memory corruption issue exists when parsing DFT files, allowing local threat actors to disclose information and execute arbitrary code by opening a...

Rockwell Automation Arena Input Analyzer 安全漏洞

Rockwell Automation Arena Input Analyzer is a software for modeling and simulating complex systems from Rockwell Automation USA. A security vulnerability exists in Rockwell Automation Arena Input Analyzer versions prior to 16.20.04 that stems from a memory corruption vulnerability when parsing DF...

CVE-2024-37025

Incorrect execution-assigned permissions in some IntelR Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-37025

Incorrect execution-assigned permissions in some IntelR Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-37025

The CVE-2024-37025 entry affects Intel(R) Advanced Link Analyzer Standard Edition: the installer in versions prior to 23.1.1 has incorrect execution-assigned permissions that may allow an authenticated local attacker to escalate privileges. The issue is documented across multiple sources, includi...

CVE-2024-37025

Incorrect execution-assigned permissions in some IntelR Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel Advanced Link Analyzer 安全漏洞

Intel Advanced Link Analyzer is an advanced link analyzer from Intel Corporation USA. Allows quick and easy evaluation of high-speed serial link performance to estimate optimal link parameter settings. A security vulnerability exists in Intel Advanced Link Analyzer versions prior to 23.1.1 that...

CVE-2024-33505

A heap-based buffer overflow in Fortinet FortiAnalyzer version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14, FortiManager version 7.4.0 through 7.4.2, 7.2.0 through 7.2.5, 7.0.0 through 7.0.12, 6.4.0 through 6.4.14 allows attacker to escalation of privilege...