CVE-2024-30037

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-30025

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-30025

Windows Common Log File System Driver Elevation of Privilege Vulnerability...

CVE-2024-1630

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1629

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-30037 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-30037

The CVE-2024-30037 entry affects Windows Common Log File System Driver and is categorized as a local Elevation of Privilege vulnerability (requires local access; may grant elevated privileges). The connected documents corroborate the CVE mapping and indicate it is part of a set of Windows fixes; ...

CVE-2024-30025 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-29996 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-29996 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1630 Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “getAllFolderContents” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1630

CVE-2024-1630 describes a path traversal vulnerability in the getAllFolderContents() function of GE HealthCare’s Common Service Desktop, a component of GE HealthCare ultrasound devices. Affects the Common Service Desktop software; root cause is improper restriction of directory paths, enabling ac...

CVE-2024-1629 Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1629 Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component

Path traversal vulnerability in “deleteFiles” function of Common Service Desktop, a GE HealthCare ultrasound device component...

CVE-2024-1629

CVE-2024-1629 describes a path traversal vulnerability in the deleteFiles() function of GE HealthCare’s Common Service Desktop, part of GE HealthCare ultrasound devices. Technical details from connected sources identify the affected component as the Common Service Desktop within the device ecosys...

AZL-40654 CVE-2024-4317 affecting package postgresql for versions less than 16.3-1

Missing authorization in PostgreSQL built-in views pgstatsext and pgstatsextexprs allows an unprivileged database user to read most common values and other statistics from CREATE STATISTICS commands of other users. The most common values may reveal column values the eavesdropper could not otherwi...

AZL-42343 CVE-2024-3727 affecting package libcontainers-common for versions less than 20210626-7

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...

AZL-42315 CVE-2024-3727 affecting package libcontainers-common for versions less than 20240213-2

A flaw was found in the github.com/containers/image library. This flaw allows attackers to trigger unexpected authenticated registry accesses on behalf of a victim user, causing resource exhaustion, local path traversal, and other attacks...