CVE-2024-26226 Windows Distributed File System (DFS) Information Disclosure Vulnerability

...

CVE-2024-26213

CVE-2024-26213 is a Microsoft Brokering File System Elevation of Privilege vulnerability in Windows BFS. Root cause: synchronization issues in the Brokering File System shared resource enable local privilege escalation. Impact: Privilege elevation on Windows Server environments using BFS. Exploit...

CVE-2024-26213 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2024-26213 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2024-29066 Windows Distributed File System (DFS) Remote Code Execution Vulnerability

...

CVE-2024-28905 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

CVE-2024-28905 Microsoft Brokering File System Elevation of Privilege Vulnerability

...

USN-6726-1: Linux kernel vulnerabilities

Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...

USN-6726-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities

Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...

USN-6724-1 linux, linux-aws, linux-azure, linux-azure-6.5, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities

Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...

CVE-2024-31978

A vulnerability has been identified in SINEC NMS All versions V2.0 SP2. Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under...

CVE-2024-31978

The CVE-2024-31978 issue affects Siemens SINEC NMS (all versions prior to 2.0 SP2). Authentication is required to access the vulnerable API endpoint, which is susceptible to path traversal and could allow an authenticated attacker to download files from the file system; in some cases, downloaded ...

CVE-2024-31978

A vulnerability has been identified in SINEC NMS All versions V2.0 SP2. Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under...

Microsoft Brokering File System Elevation of Privilege Vulnerability

...

Microsoft Brokering File System Elevation of Privilege Vulnerability

...

Microsoft Brokering File System Elevation of Privilege Vulnerability

...

Microsoft Brokering File System Elevation of Privilege Vulnerability

...

PT-2024-3309 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to insufficient access control in the Microsoft Brokering File System, which can be exploited to elevate privileges. This can potentially allow ...

CVE-2024-28904: Improper Privilege Management

Microsoft Brokering File System Elevation of Privilege Vulnerability...

PT-2024-4986 · Microsoft · Brokering File System +1

Name of the Vulnerable Software and Affected Versions: Microsoft Brokering File System affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Brokering File System, which can be exploited to elevate privileges. This could allow an...