17546 matches found
Synology Active Backup for Business Agent 访问控制错误漏洞
Synology Active Backup for Business Agent is a backup program from China-based Synology Inc. An access control error vulnerability exists in Synology Active Backup for Business Agent versions prior to 2.7.0-3221, which stems from a lack of critical functionality authentication vulnerability in th...
Synology Active Backup for Business Agent 访问控制错误漏洞
Synology Active Backup for Business Agent is a backup program from China-based Synology Inc. An access control error vulnerability exists in Synology Active Backup for Business Agent versions prior to 2.6.3-3101, which stems from a lack of critical functionality authentication vulnerability that...
Grafana Agent (Flow mode) on Windows has Unquoted Search Path or Element vulnerability
Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM. This issue affects Agent Flow before 0.43.3...
CVE-2024-8996 Grafana Agent Flow on Windows Unquoted service path
Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...
CVE-2024-8996 Grafana Agent Flow on Windows Unquoted service path
Unquoted Search Path or Element vulnerability in Grafana Agent Flow mode on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Agent Flow: before 0.43.2...
CVE-2024-8975 Grafana Alloy on Windows Unquoted service path
Unquoted Search Path or Element vulnerability in Grafana Alloy on Windows allows Privilege Escalation from Local User to SYSTEM This issue affects Alloy: before 1.3.3, from 1.4.0-rc.0 through 1.4.0-rc.1...
kernel: ftruncate: pass a signed offset
An unexpected file truncate flaw was found when opening files with specific parameters in the Linux kernel's file-system. This vulnerability allows a local user to corrupt specific files when having access to these files...
kernel: net: fix out-of-bounds access in ops_init
An out-of-bounds memory access flaw was found in the Linux kernel’s networking subsystem in how a local user triggers a complex race condition. This flaw allows a local user to crash or potentially escalate their privileges on the system...
kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...
kernel: net: sched: sch_multiq: fix possible OOB write in multiq_tune()
An out-of-bounds write flaw was found in the Linux kernel's multiq qdisc functionality. This vulnerability allows a local user to crash or potentially escalate their privileges on the system...
kernel: net: fix out-of-bounds access in ops_init
An out-of-bounds memory access flaw was found in the Linux kernel’s networking subsystem in how a local user triggers a complex race condition. This flaw allows a local user to crash or potentially escalate their privileges on the system...
kernel: pinctrl: fix deadlock in create_pinctrl() when handling -EPROBE_DEFER
A deadlock flaw was found in the Linux kernel’s pinctrl subsystem. This flaw allows a local user to crash the system...
kernel: bpf: Fix overrunning reservations in ringbuf
An out-of-bounds memory access flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to crash the system...
DEBIAN-CVE-2024-24968
Improper finite state machines FSMs in hardware logic in some IntelR Processors may allow an privileged user to potentially enable a denial of service via local access...
DEBIAN-CVE-2024-23984
Observable discrepancy in RAPL interface for some IntelR Processors may allow a privileged user to potentially enable information disclosure via local access...
PT-2024-7677 · Intel · Intel Raid Web Console
Name of the Vulnerable Software and Affected Versions: IntelR RAID Web Console software for all versions Description: The issue is related to an uncontrolled search path element in the IntelR RAID Web Console software. This may allow an authenticated user to potentially enable escalation of...
CVE-2024-6510
Local Privilege Escalation in AVG Internet Security v24 on Windows allows a local unprivileged user to escalate privileges to SYSTEM via COM-Hijacking...
kernel: net: fix out-of-bounds access in ops_init
An out-of-bounds memory access flaw was found in the Linux kernel’s networking subsystem in how a local user triggers a complex race condition. This flaw allows a local user to crash or potentially escalate their privileges on the system...
Siemens SINUMERIK Systems
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
