CVE-2024-38108

Azure Stack Hub Spoofing Vulnerability...

CVE-2024-38201 Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2024-38201 Azure Stack Hub Elevation of Privilege Vulnerability

...

CVE-2024-38201

CVE-2024-38201 is an Elevation of Privilege vulnerability in Azure Stack Hub. Documents confirm affected product: Azure Stack Hub (vendor Microsoft) with CVE-2024-38201; impact described as obtaining elevated privileges (high risk). CVSS v3.1 base score 7.0 (HIGH); attack vector LOCAL; required p...

CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability

...

CVE-2024-38108 Azure Stack Hub Spoofing Vulnerability

...

CVE-2024-38108

CVE-2024-38108 – Azure Stack Hub Spoofing Vulnerability affects Microsoft Azure Stack Hub. The connected sources describe a spoofing vulnerability with a CVSSv3.1 base score of 9.3 (AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N). The initial document does not provide a detailed root cause or exploitation s...

Azure Stack Hub Spoofing Vulnerability

...

Azure Stack Hub Elevation of Privilege Vulnerability

...

PT-2024-5742

Name of the Vulnerable Software and Affected Versions Azure Stack Hub affected versions not specified Description The issue is related to insufficient input validation in the integrated Azure Stack Hub hybrid cloud computing system. Exploitation of this issue may allow an attacker to elevate thei...

KLA71478 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET and Visua...

Malicious code in cargo-hub-ui-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93015c0c7cee38c5cd1b53a2705bbfcddacfc8efc4f2fb930268b28d34e190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8018 Malicious code in cargo-hub-ui-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93015c0c7cee38c5cd1b53a2705bbfcddacfc8efc4f2fb930268b28d34e190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cargo-hub-ui-api-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8019 Malicious code in cargo-hub-ui-api-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

kernel: USB: core: Fix access violation during port device removal

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disablestore: usbhubtostructhub can return NULL if the hub that the port belongs to is concurrently removed, but...

CVE-2024-37382

Affected products: Ab Initio Metadata Hub and Ab Initio Authorization Gateway, prior to version 4.3.1.1. Root cause: in the import host feature, crafted server configuration changes allow remote code execution. Impact: arbitrary code execution with high confidentiality, integrity, and availabilit...

PT-2024-27511 · Ab Initio · Ab Initio Authorization Gateway +1

Name of the Vulnerable Software and Affected Versions: Ab Initio Metadata Hub and Authorization Gateway versions prior to 4.3.1.1 Description: An issue in the import host feature allows attackers to run arbitrary code via crafted modification of server configuration. Recommendations: For versions...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...