The vulnerability of the accept_connection function (in the server.cpp module) of the “Red Database” database management system allows a attacker to cause a service failure in the server.

The vulnerability of the acceptconnection function in the server.cpp module of the “Red Database” database management system lies in the fact that during user authentication, memory may be corrupted, and this data is then rewritten by another thread. Exploiting this vulnerability could allow an...

CVE-2024-45013

In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvmeuninitctrl Commit 4733b65d82bd "nvme: start keep-alive after admin queue setup" moves starting keep-alive from nvmestartctrl into nvmeinitctrlfinish, but don't move stopping keep-alive into...

CVE-2024-45013 nvme: move stopping keep-alive into nvme_uninit_ctrl()

In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvmeuninitctrl Commit 4733b65d82bd "nvme: start keep-alive after admin queue setup" moves starting keep-alive from nvmestartctrl into nvmeinitctrlfinish, but don't move stopping keep-alive into...

CVE-2024-45013 nvme: move stopping keep-alive into nvme_uninit_ctrl()

In the Linux kernel, the following vulnerability has been resolved: nvme: move stopping keep-alive into nvmeuninitctrl Commit 4733b65d82bd "nvme: start keep-alive after admin queue setup" moves starting keep-alive from nvmestartctrl into nvmeinitctrlfinish, but don't move stopping keep-alive into...

Rustls vulnerable to an infinite loop in rustls::conn::ConnectionCommon::complete_io() with proper client input

...

CVE-2024-40656

In handleCreateConferenceComplete of ConnectionServiceWrapper.java, there is a possible way to reveal images across users due to a confused deputy. This could lead to local information disclosure with no additional execution privileges needed. User interaction is needed for exploitation...

CVE-2024-42285

...

CVE-2024-38240

Windows Remote Access Connection Manager Elevation of Privilege Vulnerability...

CVE-2024-38240

CVE-2024-38240 is a Windows vulnerability affecting the Windows Remote Access Connection Manager . The connected documents identify it as an elevation-of-privilege issue with a high/critical impact (listed as CVE-2024-38240 — Obtaining elevated privileges , CVSS weights shown as part of Windows s...

CVE-2024-38240 Windows Remote Access Connection Manager Elevation of Privilege Vulnerability

...

PT-2024-28970 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to the handleCreateConferenceComplete function in ConnectionServiceWrapper.java, where a confused deputy could lead to revealing...

PT-2024-6278 · Microsoft · Windows Remote Access Connection Manager +1

Name of the Vulnerable Software and Affected Versions: Windows Remote Access Connection Manager affected versions not specified Description: The issue is related to a memory reading boundary error in the Windows Remote Access Connection Manager. It allows a remote attacker to elevate their...

Microsoft Windows Remote Access Connection Manager 缓冲区错误漏洞

Microsoft Windows Remote Access Connection Manager is a Windows service from Microsoft that manages virtual private network VPN connections from your computer to the Internet.If this service is disabled, the VPN client application will If you disable this service, VPN client applications will not...

"There is no FIB [summary.xml]" error with Veeam Cloud Connect v12.2

Updated Hotfix Release -- September 30, 2024 On 2024-09-30, a new revision to the hotfix package listed in this article was released. This updated hotfix file coincides with a repackaged release of the Veeam Backup & Replication 12.2 ISO dated 20240926, which integrates the new hotfix package...

KB5043064: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (September 2024)

The remote Windows host is missing security update 5043064. It is, therefore, affected by multiple vulnerabilities - Windows MSHTML Platform Spoofing Vulnerability CVE-2024-43461 - Windows Remote Access Connection Manager Elevation of Privilege Vulnerability CVE-2024-38240 - Windows TCP/IP Remote...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an information disclosure vulnerability caused by an obfuscated agent in handleCreateConferenceComplete of ConnectionServiceWrapper.java. An attacker can exploit this vulnerability to obtain...

KB5043083: Windows 10 LTS 1507 Security Update (September 2024)

The remote Windows host is missing security update 5043083. It is, therefore, affected by multiple vulnerabilities - Microsoft is aware of a vulnerability in Servicing Stack that has rolled back the fixes for some vulnerabilities affecting Optional Components on Windows 10, version 1507 initial...

keycloak: Leak of configured LDAP bind credentials through the Keycloak admin console

A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access permission manage-realm to change the LDAP host URL "Connection URL"...

keycloak: Leak of configured LDAP bind credentials through the Keycloak admin console

A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access permission manage-realm to change the LDAP host URL "Connection URL"...

keycloak: Leak of configured LDAP bind credentials through the Keycloak admin console

A vulnerability was found in Keycloak. The LDAP testing endpoint allows changing the Connection URL independently without re-entering the currently configured LDAP bind credentials. This flaw allows an attacker with admin access permission manage-realm to change the LDAP host URL "Connection URL"...