CVE-2024-49384

The CVE-2024-49384 issue affects Acronis Cyber Protect 16 (Linux and Windows) prior to build 38690, caused by the acep-collector service binding to an unrestricted IP address, creating an excessive attack surface. Technical details from PT-2024-33498 identify the vulnerable version range and root...

PT-2024-33498 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 38690 Description: The issue is related to an excessive attack surface in the acep-collector service due to binding to an unrestricted IP address. Recommendations: For Acronis Cyber Protect 16...

PT-2024-7384 · Acronis · Acronis Cyber Protect

Name of the Vulnerable Software and Affected Versions: Acronis Cyber Protect 16 versions prior to build 38690 Description: The issue is related to the cleartext transmission of sensitive information in the acep-collector service, which may allow a remote attacker to gain unauthorized access to...

Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, network security, and endpoint management features such as vulnerability assessment, URL filtering, patch management, etc. A security vulnerabilit...

Acronis Cyber Protect 安全漏洞

Acronis Cyber Protect is an all-in-one cyber protection solution for business and enterprise from Acronis Switzerland. Combining backup, anti-malware, network security and endpoint management features such as vulnerability assessment, URL filtering, patch management and more. A security...

A week in security (October 7 – October 13)

Last week on Malwarebytes Labs: Modern TVs have "unprecedented capabilities for surveillance and manipulation," group reveals Internet Archive suffers data breach and DDoS Google Search user interface: A/B testing shows security concerns remain AI girlfriend site breached, user fantasies stolen...

SUSE CVE-2023-29544

If multiple instances of resource exhaustion occurred at the incorrect time, the garbage collector could have caused memory corruption and a potentially exploitable crash. This vulnerability affects Firefox for Android 112, Firefox 112, and Focus for Android 112...

CentOS 7 : firefox (RHSA-2022:7069)

The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:7069 advisory. - A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the result of a redirect, via performance.getEntries...

CVE-2024-43603

Visual Studio Collector Service Denial of Service Vulnerability...

CVE-2024-43603

Visual Studio Collector Service Denial of Service Vulnerability...

CVE-2024-43603 Visual Studio Collector Service Denial of Service Vulnerability

...

CVE-2024-43603 Visual Studio Collector Service Denial of Service Vulnerability

...

CVE-2024-43603

CVE-2024-43603 is a Denial of Service vulnerability in the Visual Studio Diagnostics Hub Standard Collector (Visual Studio Collector Service). The MS security update description confirms a DoS in Diagnostics Hub Standard Collector when handling certain file operations. Remediations are provided v...

Visual Studio Collector Service Denial of Service Vulnerability

...

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the uncontrolled element of the search path, which allows attackers to exploit their privileges.

The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector is related to an uncontrolled element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications

Summary Multiple Vulnerabilities were disclosed as part of the Oracle July 2024 Critical Patch Update. Vulnerability Details CVEID:CVE-2024-21094 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause no confidentiality impact, low...

Security Bulletin: Multiple vulnerabilities may affect IBM® SDK, Java™ Technology Edition for IBM Content Collector for SAP Applications

Summary Multiple Vulnerabilities were disclosed as part of the Oracle July 2024 Critical Patch Update. Vulnerability Details CVEID: CVE-2024-21011 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause low availability impact. CVSS...

kernel: af_unix: Fix garbage collector racing against connect()

A flaw was found in the Linux kernel, where the management of inter-process communication uses AFUNIX sockets. The issue arises from a race condition where a partially initialized socket with specific permissions carrying SCMRIGHTS is improperly handled during garbage collection. This situation...

python3.11 security update

An update is available for python3.11. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Python is an interpreted, interactive, object-oriented programming languag...

Grafana Alloy 安全漏洞

Grafana Alloy is an open source OpenTetry Collector distribution of Grafana Open Source. A security vulnerability exists in Grafana Alloy versions prior to 1.3.3 that stems from an unquoted search path or element vulnerability that allows elevation of privilege...