CVE-2023-6833

CVE-2023-6833 affects Hitachi Ops Center Administrator prior to version 11.0.1. The vulnerability is an information exposure caused by insertion of sensitive data into log files, allowing local users to access sensitive information. Affected component: Hitachi Ops Center Administrator logging. Im...

Hitachi Ops Center Administrator 安全漏洞

Hitachi Ops Center Administrator is a management interface and tool for managing and monitoring Hitachi Hitachi storage devices from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi Ops Center Administrator versions prior to 11.0.1, which originates from inserting sensitive...

CVE-2023-6833: Insertion of Sensitive Information into Log File

Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator allows local users to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 11.0.1...

PT-2024-15104 · Hitachi · Hitachi Ops Center Administrator

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Administrator versions prior to 11.0.1 Description: The issue allows local users to gain sensitive information due to the insertion of sensitive information into log files. Recommendations: For versions prior to 11.0.1,...

CVE-2024-2493: Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

Session Hijacking vulnerability in Hitachi Ops Center Analyzer.This issue affects Hitachi Ops Center Analyzer: from 10.0.0-00 before 11.0.1-00...

Hitachi Ops Center Analyzer 安全漏洞

Hitachi Ops Center Analyzer is a data center management software from Hitachi, Ltd Hitachi, Japan. It monitors, reports, and correlates end-to-end performance from servers to storage. A security vulnerability exists in Hitachi Ops Center Analyzer version 10.0.0-00 through versions prior to...

PT-2024-3138

Name of the Vulnerable Software and Affected Versions Hitachi Ops Center Analyzer versions 10.0.0-00 through 11.0.1-00 Description The issue is related to the absence of the Secure flag in HTTPS session cookies, which can be exploited by a remote attacker to gain unauthorized access to protected...

GitLab 安全漏洞

GitLab is an open source, end-to-end software development platform from GitLab, Inc. with built-in version control, issue tracking, code review, CI/CD Continuous Integration and Continuous Delivery, and other features. A security vulnerability exists in GitLab CE/EE. An attacker exploiting the...

SUSE CVE-2024-26793

In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtpnewlink The gtplinkops operations structure for the subsystem must be registered after registering the gtpnetops pernet operations structure. Syzkaller hit 'general protection faul...

CVE-2024-26810 vfio/pci: Lock external INTx masking ops

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outside of the core interrupt code. In...

CVE-2024-26810 vfio/pci: Lock external INTx masking ops

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outside of the core interrupt code. In...

CVE-2024-26810

In the Linux kernel, the following vulnerability has been resolved: vfio/pci: Lock external INTx masking ops Mask operations through config space changes to DisINTx may race INTx configuration changes via ioctl. Create wrappers that add locking for paths outside of the core interrupt code. In...

DEBIAN-CVE-2024-26793

In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtpnewlink The gtplinkops operations structure for the subsystem must be registered after registering the gtpnetops pernet operations structure. Syzkaller hit 'general protection faul...

UBUNTU-CVE-2024-26793

In the Linux kernel, the following vulnerability has been resolved: gtp: fix use-after-free and null-ptr-deref in gtpnewlink The gtplinkops operations structure for the subsystem must be registered after registering the gtpnetops pernet operations structure. Syzkaller hit 'general protection faul...

DEBIAN-CVE-2024-26734

In the Linux kernel, the following vulnerability has been resolved: devlink: fix possible use-after-free and memory leaks in devlinkinit The pernet operations structure for the subsystem must be registered before registering the generic netlink family. Make an unregister in case of unsuccessful...

CVE-2021-47159 net: dsa: fix a crash if ->get_sset_count() fails

In the Linux kernel, the following vulnerability has been resolved: net: dsa: fix a crash if -getssetcount fails If ds-ops-getssetcount fails then it "count" is a negative error code such as -EOPNOTSUPP. Because "i" is an unsigned int, the negative error code is type promoted to a very high value...

DEBIAN-CVE-2021-47140

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

UBUNTU-CVE-2021-47140

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

CVE-2021-47140 iommu/amd: Clear DMA ops when switching domain

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...

CVE-2021-47140 iommu/amd: Clear DMA ops when switching domain

In the Linux kernel, the following vulnerability has been resolved: iommu/amd: Clear DMA ops when switching domain Since commit 08a27c1c3ecf "iommu: Add support to change default domain of an iommu group" a user can switch a device between IOMMU and direct DMA through sysfs. This doesn't work for...