EulerOS 2.0 SP11 : vim (EulerOS-SA-2024-2570)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. double-free in dialogchanged in Vim v9.1.0648. When abandoning a buffer, Vim may ask the user what to...

EulerOS 2.0 SP11 : vim (EulerOS-SA-2024-2596)

According to the versions of the vim packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Vim is an open source command line text editor. double-free in dialogchanged in Vim v9.1.0648. When abandoning a buffer, Vim may ask the user what to...

PT-2024-7198

Name of the Vulnerable Software and Affected Versions JunOS Evolved affected versions not specified Description The issue is related to an unbounded resource allocation in the PFE management daemon evo-pfemand of JunOS Evolved operating systems. An attacker, acting remotely, can exploit this to...

PT-2024-7197 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: JunOS Evolved affected versions not specified Description: The issue is related to an unbounded resource allocation in the PFE management daemon evo-pfemand of JunOS Evolved operating systems. An attacker, acting remotely, can exploit this...

PT-2024-7199

Name of the Vulnerable Software and Affected Versions JunOS Evolved affected versions not specified Description The issue is related to an unbounded resource allocation in the PFE management daemon evo-pfemand of JunOS Evolved operating systems. An attacker, acting remotely, can exploit this issu...

PT-2024-7844 · Juniper Networks · Junos Evolved

Name of the Vulnerable Software and Affected Versions: Junos OS Evolved versions prior to 20.4R3-S9-EVO Junos OS Evolved version 21.2-EVO prior to 21.2R3-S7-EVO Junos OS Evolved version 21.4-EVO prior to 21.4R3-S5-EVO Junos OS Evolved version 22.1-EVO prior to 22.1R3-S5-EVO Junos OS Evolved versi...

CVE-2024-43591

Azure Command Line Integration CLI Elevation of Privilege Vulnerability...

CVE-2024-43591

Azure Command Line Integration CLI Elevation of Privilege Vulnerability...

UBUNTU-CVE-2024-43591

Azure Command Line Integration CLI Elevation of Privilege Vulnerability...

CVE-2024-43591 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

...

CVE-2024-43591

Azure Command Line Integration CLI Elevation of Privilege Vulnerability...

CVE-2024-43591

CVE-2024-43591 is an elevation-of-privilege vulnerability in the Microsoft Azure Command Line Interface (CLI). The IBM security bulletin and related Nessus/SUSE advisories confirm it affects Azure CLI components and assigns a high/critical impact (CN/Privilege escalation) with a CVSS v3.1 score a...

CVE-2024-43591 Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

...

Azure Command Line Integration (CLI) Elevation of Privilege Vulnerability

...

ggit is vulnerable to Arbitrary Argument Injection via the clone() API

All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...

CVE-2024-21533

All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...

CVE-2024-21533

GGIT is affected across all versions by Arbitrary Argument Injection via the clone() API. The root cause is failure to sanitize user input and validate URL schemes, plus improper handling of git command-line flags (using -- to end options). Public details include a PoC from Snyk and a GitHub gist...

CVE-2024-21533

All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...

CVE-2024-21533

All versions of the package ggit are vulnerable to Arbitrary Argument Injection via the clone API, which allows specifying the remote URL to clone and the file on disk to clone to. The library does not sanitize for user input or validate a given URL scheme, nor does it properly pass command-line...

PT-2024-31739

Name of the Vulnerable Software and Affected Versions: Apache Subversion versions up to and including 1.14.3 Description: On Windows platforms, a "best fit" character encoding conversion of command line arguments to Subversion's executables may lead to unexpected command line argument...