CVE-2024-22385 File and Directory Permission Vulnerability in Hitachi Storage Provider for VMware vCenter

Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read and write specific files.This issue affects Hitachi Storage Provider for VMware vCenter: from 3.1.0 before 3.7.4...

PT-2024-4569

Name of the Vulnerable Software and Affected Versions: Hitachi Storage Provider for VMware vCenter versions 3.1.0 through 3.7.3 Description: The issue is related to incorrect default permissions, allowing local users to read and write specific files. This could potentially enable an attacker to...

Advisory ROSA-SA-2024-2432

Software: man-db 2.7.6.1 OS: ROSA Virtualization 2.1 packageevrstring: man-db-2.7.6.1 CVE-ID: CVE-2018-25078 BDU-ID: None CVE-Crit: N/A CVE-DESC.: man-db in Gentoo allows local users with access to the man user account to gain root privileges, because /usr/bin/mandb is executed by the root user,...

RLSA-2024:3184 Moderate: grub2 security update

The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...

Rocky Linux 8 : grub2 (RLSA-2024:3184)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3184 advisory. grub2: grub2-set-bootflag can be abused by local pseudo-users CVE-2024-1048 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution...

Dell ThinOS Information Disclosure Vulnerability

Dell ThinOS is a client operating system from Dell USA. An information disclosure vulnerability exists in Dell ThinOS 2402 Telemetry Dashboard v1.0.0.8, which originates from allowing an unauthenticated user with local access to the device to disclose information...

CVE-2024-5908

A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting...

PT-2024-4211 · Palo Alto Networks · Palo Alto Networks Globalprotect

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App affected versions not specified Description: A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in applicati...

AZL-51921 CVE-2022-4968 affecting package netplan for versions less than 1.0.1-1

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

DEBIAN-CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

UBUNTU-CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968

CVE-2022-4968 affects netplan: it leaks the WireGuard private key to local users. Affected versions are prior to 1.0; versions after 1.0 are not affected. Ubuntu advisory USN-6851-1 and vendor advisories indicate a patch is available (e.g., netplan.io 0.104-0ubuntu2~20.04.5). Several Nessus/NVD e...

CVE-2022-4968

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

CVE-2022-4968: Exposure of Sensitive System Information to an Unauthorized Control Sphere

netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...

PT-2024-11906

Name of the Vulnerable Software and Affected Versions netplan versions prior to 1.0 Description The issue concerns netplan leaking the private key of WireGuard to local users. A security fix is expected to be released soon. Recommendations For versions prior to 1.0, a security fix will be release...

CVE-2024-3716 Foreman-installer: candlepin database password being leaked to local users via the process list

A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password...

CVE-2024-3716 Foreman-installer: candlepin database password being leaked to local users via the process list

A flaw was found in foreman-installer when puppet-candlepin is invoked cpdb with the --password parameter. This issue leaks the password in the process list and allows an attacker to take advantage and obtain the password...

SUSE CVE-2020-10773

A stack information leak flaw was found in s390/s390x in the Linux kernel's memory manager functionality, where it incorrectly writes to the /proc/sys/vm/cmmtimeout file. This flaw allows a local user to see the kernel data...