CVE-2024-30060 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-30060

The connected PT-2024-3939 advisory identifies Microsoft Azure Monitor Agent as affected. Root cause is an incorrect reference count before accessing a file, enabling privilege escalation via a specially crafted link. Affected versions are not specified, and there is no information about a fix in...

CVE-2024-30060 Azure Monitor Agent Elevation of Privilege Vulnerability

...

Azure Monitor Agent Elevation of Privilege Vulnerability

...

KLA67625 PE vulnerability in Microsoft Azure

An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-30060 Related products Microsoft-Azure CVE list CVE-2024-30060 critical KB list Solution Install necessary updates from the KB...

Microsoft Azure Monitor Agent 安全漏洞

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An elevation of privilege vulnerability exists in Microsoft Azure Monitor Agent, which stems from the presence of an elevation of privilege vulnerability. An attacker can exploit the...

PT-2024-26242 · Flyfish · Flyfish

Name of the Vulnerable Software and Affected Versions: FlyFish version 3.0.0 Description: The issue is a buffer overflow via the password parameter on the login page, allowing attackers to cause a Denial of Service DoS via a crafted input. This can potentially lead to system compromise...

May 14, 2024—KB5037781 (OS Build 25398.887)

None None...

Intel® PCM Software Advisory

Summary: A potential security vulnerability in some Intel® Performance Counter Monitor PCM software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21818 Description: Uncontrolled search path i...

PT-2024-21911

Name of the Vulnerable Software and Affected Versions Plantronics Hub versions 3.25.1 and below Description A privilege escalation issue exists in the updater for Plantronics Hub, allowing attackers to gain elevated access. It is recommended to patch immediately and monitor for signs of compromis...

Lunar 安全漏洞

Lunar is a tool that uses the DDC protocol to change the hardware brightness of a monitor. A security vulnerability exists in Lunar versions 6.0.2 through 6.6.0 that originates from a vulnerability that allows an attacker to perform auxiliary process injection into the Lunar application and abuse...

CVE-2024-20864

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources...

CVE-2024-20864

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources...

PT-2024-18775 · Unknown · Darmanagerservice

Name of the Vulnerable Software and Affected Versions: DarManagerService versions prior to SMR May-2024 Release 1 Description: The issue is related to improper access control in DarManagerService, allowing local attackers to monitor system resources. Recommendations: For versions prior to SMR...

Security Bulletin: VMware Tanzu Spring Framework is vulnerable to multiple security CVEs used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses VMWare Tanzu Spring Framework which is vulnerable to multiple security CVEs. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-22262 DESCRIPTION: VMware Tanzu Spring Framewo...

Security Bulletin:Tensorflow, which is vulnerable to multiple security CVEs, is used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses Tensorflow which is vulnerable to multiple security CVEs. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-25658 DESCRIPTION: TensorFlow is vulnerable to a denial of servic...

CVE-2023-51582

Voltronic Power ViewPower LinuxMonitorConsole Exposed Dangerous Method Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Voltronic Power ViewPower. Authentication is not required to exploit this vulnerability. Th...

CVE-2023-39464

Triangle MicroWorks SCADA Data Gateway GTWWebMonitorService Unquoted Search Path Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute code on affected installations of Triangle MicroWorks SCADA Data Gateway. Although authentication is required to exploit this...

CVE-2024-34061

CVE-2024-34061 – Changedetection.io is affected in versions prior to 0.45.22. A reflected Cross‑Site Scripting (XSS) vulnerability arises because input in the notification_urls parameter is not properly sanitized and is reflected on the page, enabling injection of malicious JavaScript. The CVSS v...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor announcements...