AZL-52278 CVE-2024-51744 affecting package telegraf for versions less than 1.29.4-15

golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...

RAPL Interface Disclosure

The vulnerability of the RAPL Interface microprogramming software for Intel processors involves the disclosure of information through incompatibility. Exploiting this vulnerability can allow attackers to disclose protected information...

Windows Cryptographic Services Unauthorized Access

The vulnerability of cryptographic services in Windows operating systems is related to the disclosure of information due to incompatibility. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

PT-2024-10326 · Ibm · Ibm Concert

Name of the Vulnerable Software and Affected Versions: IBM Concert versions 1.0.0 through 1.0.2 Description: The issue is related to sensitive information disclosure through specially crafted API calls. It is associated with insufficient protection of service data due to the use of incompatible...

Erlang Information Disclosure

The vulnerability of the Erlang programming language interpreter is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

DEBIAN-CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

UBUNTU-CVE-2024-45624

Exposure of sensitive information due to incompatible policies issue exists in Pgpool-II. If a database user accesses a query cache, table data unauthorized for the user may be retrieved...

Two-Factor Authentication System Security Token Disclosure

The vulnerability of the final point of the application software interface for two-factor authentication based on token generation by Twilio Authy is related to the disclosure of information due to incompatibility. Exploiting this vulnerability could allow a malicious actor to disclose the...

IBM i Information Disclosure

The vulnerability of the IBM i operating system is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2024-41030

A flaw was found in the ksmbd module in the Linux kernel. Incorrect write flags set when opening a directory can cause a linked list corruption and a call to the BUG function, resulting in a denial of service...

Secure Boot Bypass

The vulnerability of the Secure Boot protocol for loading operating systems on Windows is related to access to resources through incompatible types. Exploiting this vulnerability could allow a malicious actor to circumvent existing security restrictions remotely...

PT-2024-4733 · Microsoft · Windows Bitlocker +1

Name of the Vulnerable Software and Affected Versions: Windows BitLocker affected versions not specified Description: The issue is related to a security feature bypass vulnerability in the BitLocker data protection function of Windows operating systems. This vulnerability can be exploited by an...

lxc-user-nic Information Disclosure

The vulnerability of the lxc-user-nic component in the LXC virtualization system is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Intel Information Disclosure

The vulnerability of Intel microprogramming software is related to the disclosure of information through incompatibility. Exploiting this vulnerability can allow an intruder to disclose the protected information...

Red Hat 3scale Security Vulnerability

Red Hat 3scale is a suite of API Application Programming Interface lifecycle management software from Red Hat. A security vulnerability exists in Red Hat 3Scale that stems from an incompatibility between the use3scaleoidcissuerendpoint of the token introspection policy and RH-SSO 7.5 or later...

PT-2024-14986

Name of the Vulnerable Software and Affected Versions MİA-MED versions prior to 1.0.7 Description The issue is related to the exposure of sensitive information due to incompatible policies, allowing the collection of data as provided by users. Recommendations For versions prior to 1.0.7, update t...

jsrsasign PKCS#1 v1.5 Bleichenbacher Marvin

The vulnerability of the PKCS1 v1.5 standard implementation in the jsrsasign cryptographic library is related to the disclosure of information due to incompatibility. Exploiting this vulnerability could allow an attacker, operating remotely, to execute the Bleichenbacher attack or the Marvin atta...

NSS Network Security Service Information Disclosure

The vulnerability of NSS network security service for the Mozilla Firefox browser is related to the disclosure of information due to incompatibility. Exploiting this vulnerability allows a malicious actor to gain access to confidential information...

Power Automate agent for virtual desktops doesn't work in ICA/HDX session.

Power Automate agent for virtual desktops doesn't work in ICA/HDX session...

Veeam Plug-In for Google Cloud Backup Stuck at 0%

Challenge Backup policies in Veeam Plug-In for Google Cloud are stuck at 0% progress. Cause This situation is caused by Google recently updating the latest Ubuntu Linux machine image available in their cloud to ubuntu-2204-jammy-v20230829. The existing worker VM methods utilized in Veeam Plug-In...