PT-2023-30904 · Microsoft · Azure Rtos Usbx

Name of the Vulnerable Software and Affected Versions: Azure RTOS USBX versions 6.2.1 and below Description: Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to out of bounds write...

PT-2023-30903 · Microsoft · Azure Rtos Usbx

Name of the Vulnerable Software and Affected Versions: Azure RTOS USBX versions prior to 6.3.0 Description: Azure RTOS USBX is a USB host, device, and on-the-go OTG embedded stack, fully integrated with Azure RTOS ThreadX. An attacker can cause remote code execution due to expired pointer...

PT-2023-30778 · Microsoft · Azure Rtos Netx Duo

Name of the Vulnerable Software and Affected Versions: Azure RTOS NetX Duo versions 6.2.1 and below Description: The issue affects Azure RTOS NetX Duo, a TCP/IP network stack for deeply embedded real-time and IoT applications. An attacker can cause remote code execution due to memory overflow...

PT-2023-30902 · Microsoft · Azure Rtos Threadx

Name of the Vulnerable Software and Affected Versions: Azure RTOS ThreadX versions prior to 6.3.0 Description: Azure RTOS ThreadX is an advanced real-time operating system RTOS designed specifically for deeply embedded applications. An attacker can cause arbitrary read and write due to a...

Ubuntu: Security Advisory (USN-6496-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-6495-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: A vulnerability in Microsoft Azure Identity SDK may affect IBM Robotic Process Automation for Cloud Pak and result in arbitrary code execution. (CVE-2023-36414).

Summary There is a vulnerability in Microsoft Azure Identity SDK used by IBM Robotic Process Automation as part of API configuration. An attacker could exploit this vulnerability to execute arbitrary code on the system, caused by an integer overflow. CVE-2020-36414. Vulnerability Details...

USN-6494-2: Linux kernel vulnerabilities

Yu Hao discovered that the UBI driver in the Linux kernel did not properly check for MTD with zero erasesize during device attachment. A local privileged attacker could use this to cause a denial of service system crash. CVE-2023-31085 Lucas Leong discovered that the netfilter subsystem in the...

USN-6496-2: Linux kernel vulnerabilities

Ivan D Barrera, Christopher Bednarz, Mustafa Ismail, and Shiraz Saleem discovered that the InfiniBand RDMA driver in the Linux kernel did not properly check for zero-length STAG or MR registration. A remote attacker could possibly use this to execute arbitrary code. CVE-2023-25775 Yu Hao discover...

SUSE-SU-2023:4609-1 Security update for python-azure-storage-queue

This update for python-azure-storage-queue fixes the following issues: - CVE-2022-30187: Fixed information disclosure vulnerability bsc1202088...

SUSE SLES15 Security Update : python-azure-storage-queue (SUSE-SU-2023:4609-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4609-1 advisory. - CVE-2022-30187: Fixed information disclosure vulnerability bsc1202088. Tenable has extracted the preceding description block directly from...

Security Update for Azure Identity Module (October 2023)

The version of Azure Identity installed on the remote host is prior to 3.3.1. It is, therefore, affected by a remote code execution vulnerability: As an authenticated user, the attacker could attempt to trigger malicious code in the context of the server's account through a network call. The...

Azure Identity Library Installed (Windows)

Binary data azureidentitywininstalled.nbin...

Azure Identity Library Installed (Linux/UNIX)

Binary data azureidentitynixinstalled.nbin...

Creating Azure catalog resources failed Resource 'citrix-xd-XXXXXX' was disallowed by policy.

Unable to create new machine catalogs when selecting the option - "Create a resource group to provision machines" within the catalog creation wizard and we observe the error - "Creating Azure catalog resources failed Resource 'citrix-xd-XXXXXX' was disallowed by policy. Reasons: 'Resource group i...

Information Disclosure

azurecli, is vulnerable to Information Disclosure. The vulnerability exists due to sensitive information thats exposed in log files, allowing an attacker to recover plaintext passwords and usernames from log files...

The vulnerability of the command-line interface (CLI) of the Microsoft Azure platform, which allows a hacker to gain access to user credentials

The vulnerability of the Command Line Interface CLI of the Microsoft Azure platform is related to the lack of protection for operational data. Exploiting this vulnerability can allow a malicious actor to gain access to user credentials remotely...

Oracle Linux 8 : grafana (ELSA-2023-6972)

The remote Oracle Linux 8 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-6972 advisory. - resolve CVE-2023-39325 CVE-2023-44487 rapid stream resets can cause excessive work - resolve CVE-2023-3128 grafana: account takeover possible when using Azure...

Microsoft Azure Pipelines Agent Installed (Windows)

Binary data microsoftazurepipelinesagentwininstalled.nbin...

PT-2023-7501 · Microsoft · Azure Rtos Netx Duo

Name of the Vulnerable Software and Affected Versions: Azure RTOS NetX Duo versions 6.2.1 and below Description: The issue is related to a memory overflow vulnerability in the Azure RTOS NetX Duo TCP/IP network stack, which can be exploited by an attacker to achieve remote code execution. The...