Azure Stack Hub Elevation of Privilege Vulnerability

...

PT-2024-5745

Name of the Vulnerable Software and Affected Versions Azure Stack Hub affected versions not specified Description The issue is related to the Azure Stack Hub integrated system of hybrid cloud computing, where the structure of web pages is not properly protected, allowing for spoofing attacks. An...

PT-2024-5744

Name of the Vulnerable Software and Affected Versions Azure IoT Hub Device Client SDK affected versions not specified Description The issue is related to a memory reuse error in the Azure IoT Hub Device Client SDK toolkit and libraries. Exploitation of this issue may allow an attacker to execute...

PT-2024-5742

Name of the Vulnerable Software and Affected Versions Azure Stack Hub affected versions not specified Description The issue is related to insufficient input validation in the integrated Azure Stack Hub hybrid cloud computing system. Exploitation of this issue may allow an attacker to elevate thei...

KLA71478 Multiple vulnerabilities in Microsoft Developer Tools

Multiple vulnerabilities were found in Microsoft Developer Tools. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A denial of service vulnerability in .NET and Visua...

CVE-2024-38201: Improper Input Validation

Azure Stack Hub Elevation of Privilege Vulnerability...

Malicious code in cargo-hub-ui-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93015c0c7cee38c5cd1b53a2705bbfcddacfc8efc4f2fb930268b28d34e190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8018 Malicious code in cargo-hub-ui-api (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a93015c0c7cee38c5cd1b53a2705bbfcddacfc8efc4f2fb930268b28d34e190 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in cargo-hub-ui-api-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-8019 Malicious code in cargo-hub-ui-api-internal (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8165fa0cd101e6b1ef78a13e6355f2f54b163dad9b094756aeb50ad2ce54b516 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

kernel: USB: core: Fix access violation during port device removal

In the Linux kernel, the following vulnerability has been resolved: USB: core: Fix access violation during port device removal Testing with KASAN and syzkaller revealed a bug in port.c:disablestore: usbhubtostructhub can return NULL if the hub that the port belongs to is concurrently removed, but...

PT-2024-27511 · Ab Initio · Ab Initio Authorization Gateway +1

Name of the Vulnerable Software and Affected Versions: Ab Initio Metadata Hub and Authorization Gateway versions prior to 4.3.1.1 Description: An issue in the import host feature allows attackers to run arbitrary code via crafted modification of server configuration. Recommendations: For versions...

CVE-2024-37382

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

CVE-2024-37382

Affected products: Ab Initio Metadata Hub and Ab Initio Authorization Gateway, prior to version 4.3.1.1. Root cause: in the import host feature, crafted server configuration changes allow remote code execution. Impact: arbitrary code execution with high confidentiality, integrity, and availabilit...

CVE-2024-37382: Improper Control of Generation of Code

An issue discovered in import host feature in Ab Initio Metadata Hub and Authorization Gateway before 4.3.1.1 allows attackers to run arbitrary code via crafted modification of server configuration...

Ab Initio Metadata Hub和Ab Initio Authorization Gateway 安全漏洞

Ab Initio Metadata Hub and Ab Initio Authorization Gateway are both products of Ab Initio, Inc. of the U.S. Ab Initio Metadata Hub is a metadata system.Ab Initio Authorization Gateway is an authorization gateway. A security vulnerability exists in Ab Initio Metadata Hub and Ab Initio Authorizatio...

SUSE: Security Advisory (SUSE-SU-2024:2629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2663-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Moderate: Red Hat Bug Fix Advisory: Red Hat Developer Hub 1.2.2 bugfix release

Red Hat Developer Hub 1.2.2 has been released. Red Hat Developer Hub RHDH is Red Hat's enterprise-grade, self-managed, customizable developer portal based on Backstage.io. RHDH is supported on OpenShift and other major Kubernetes clusters AKS, EKS, GKE. The core features of RHDH include a single...