13881 matches found
KB5041773: Windows 10 Version 1607 / Windows Server 2016 Security Update (August 2024)
The remote Windows host is missing security update 5041773. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
Security Updates for Azure Connected Machine Agent (August 2024)
The Microsoft Azure Connected Machine Agent running on the remote host is prior to 1.44. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number. %NASLMINLEVE...
KB5041573: Windows Server version 23H2 Security Update (August 2024)
The remote Windows host is missing security update 5041573. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
KB5041580: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (August 2024)
The remote Windows host is missing security update 5041580. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
Microsoft Azure Connected Machine Agent Access Control Vulnerability
Microsoft Azure Connected Machine Agent is a U.S. Microsoft Corporation's ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. An access control error vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker coul...
PT-2024-5651 · Microsoft · Windows Initial Machine Configuration +1
Name of the Vulnerable Software and Affected Versions: Windows Initial Machine Configuration affected versions not specified Description: The issue is related to insufficient access control in the Windows Initial Machine Configuration component, allowing an attacker to elevate their privileges...
PT-2024-27887 · Microsoft · Azure Connected Machine Agent
Name of the Vulnerable Software and Affected Versions: Azure Connected Machine Agent affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Connected Machine Agent. There is no information provided about the estimated number of...
PT-2024-27895 · Microsoft · Azure Connected Machine Agent
Name of the Vulnerable Software and Affected Versions: Azure Connected Machine Agent affected versions not specified Description: The issue is related to an Elevation of Privilege Vulnerability in the Azure Connected Machine Agent. Recommendations: At the moment, there is no information about a...
Microsoft Azure Connected Machine Agent backend link vulnerability
Microsoft Azure Connected Machine Agent is a U.S.-based Microsoft company's ability to manage Windows and Linux computers hosted outside of Azure on a corporate network or other cloud provider. A backlink vulnerability exists in Microsoft Azure Connected Machine Agent. An attacker could exploit t...
CVE-2024-38223: Improper Access Control
Windows Initial Machine Configuration Elevation of Privilege Vulnerability...
CVE-2024-38098: Improper Link Resolution Before File Access
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
CVE-2024-38162: Improper Access Control
Azure Connected Machine Agent Elevation of Privilege Vulnerability...
KB5041585: Windows 11 version 22H2 / Windows 11 version 23H2 Security Update (August 2024)
The remote Windows host is missing security update 5041585. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
KB5041592: Windows 11 version 21H2 Security Update (August 2024)
The remote Windows host is missing security update 5041592. It is, therefore, affected by multiple vulnerabilities - An elevation of privilege vulnerability exists in Windows based systems supporting Virtualization Based Security VBS including a subset of Azure Virtual Machine SKUS. This can allo...
Imperva Security Efficacy and Operational Efficiency Leads the Industry in SecureIQLab’s Cloud WAAP Comparative Report
In the 2024 Cloud Web Application and API Protection WAAP CyberRisk Comparative Validation Report from SecureIQLab, Imperva outperformed all other vendors in both security efficacy and operational efficiency. This comprehensive report, based on third-party testing, demonstrates Imperva's commitme...
PT-2024-31355
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.6.50 Description A NULL pointer dereference bug has been identified in the Linux kernel due to a data race. This issue occurs when the fscache cookie state machine function is slow and still running while anoth...
KVM: SVM: WARN on vNMI + NMI window iff NMIs are outright masked
...
CWA-2024-004: Gas mispricing in cosmwasm-vm
Some Wasm operations take significantly more gas than our benchmarks indicated. This can lead to missing the gas target we defined by a factor of 10x. This means a malicious contract could take 10 times as much time to execute as expected, which can be used to temporarily DoS a chain. For more...