CVE-2024-49138 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49090 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-49088 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

Description of the security update for SharePoint Server 2019: December 10, 2024 (KB5002657)

None None...

PT-2024-9321

Name of the Vulnerable Software and Affected Versions Windows Common Log File System Driver affected versions not specified Description The vulnerability is an elevation-of-privilege issue in the Windows Common Log File System Driver. It allows attackers to gain SYSTEM privileges on Windows...

Microsoft Windows Common Log File System Driver 安全漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. A...

CVE-2020-11991

creationtimestamp| type| source ---|---|--- 2024-12-09 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-09 2024-12-29 00:00:00+00:00| exploited| The Shadowserver honeypot/exploited-vulnerabilities - 2024-12-29 2025-01-26 00:00:00+00:00| seen| The Shadowserv...

Malicious code in admin-upload-common (npm)

--- -= Per source details. Do not edit below this line.=-...

MAL-2024-11272 Malicious code in @isfe-common/image-minimizer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @isfe-common/image-minimizer (npm)

--- -= Per source details. Do not edit below this line.=-...

Malicious code in @afound/common (npm)

--- -= Per source details. Do not edit below this line.=-...

BELL-CVE-2024-53127

Bulletin has no description...

CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3

CVE-2024-24786 affecting package libcontainers-common for versions less than 20240213-3. A patched version of the package is available...

CISA Releases New Public Version of CDM Data Model Document

Today, the Cybersecurity and Infrastructure Security Agency CISA released an updated public version of the Continuous Diagnostics and Mitigation CDM Data Model Document. Version 5.0.1 aligns with fiscal year 2023 Federal Information Security Modernization Act FISMA metrics. The CDM Data Model...

kernel: cifs: fix oops during encryption

An out-of-bounds memory access vulnerability exists in the linux kernel, such that A stack-allocated buffer backed by vmalloc was passed into crypto code scatterwalkmapandcopy → memcpy where a cross-page write occurred. This ended up hitting a read-only mapping, causing a page-level fault and...

CVE-2024-25020

IBM Cognos Controller 11.0.0 and 11.0.1 is vulnerable to malicious file upload by allowing unrestricted filetype attachments in the Journal entry page. Attackers can make use of this weakness and upload malicious executable files into the system and can be sent to victims for performing further...

CVE-2024-10074

CVE-2024-10074 affects OpenHarmony v4.1.1 and earlier. A use-after-free memory issue allows a local attacker to elevate privileges, upgrading a standard permission to root. Root cause described as memory reuse after release. Impact is local, with high severity; CVSS vectors indicate local access ...

CVE-2024-10074 Liteos_a has an use after free vulnerability

in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free...

CVE-2024-45068

Affected products: Hitachi Ops Center Common Services (versions 10.9.3-00 to 11.0.3-00) and Hitachi Ops Center OVA (versions 10.9.3-00 to 11.0.2-01). Issue: authentication credentials leakage due to default credentials usage, enabling potential unauthorized access. Impact: confidentiality at HIGH...