EUVD-2013-2918

Malware in sbrugna...

EUVD-2024-34145

Malicious code in bioql PyPI...

EUVD-2022-25132

Malicious code in bioql PyPI...

CVE-2023-26058

An XXE issue was discovered in Nokia NetAct before 22 FP2211 via an XML document to a Performance Manager page. Input validation and a proper XML parser configuration are missing. For an external attacker, it is very difficult to exploit this, because a few dynamically created parameters such as...

CVE-2021-28246

CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPATH, to be dynamically linked when the emtgtctl2 executable is run. The code in the library will be...

Malicious code in business-kpi-manager-1.0.0 (npm)

--- -= Per source details. Do not edit below this line.=-...

CVE-2024-11597

Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11597

Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11597

Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11597

Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...

CVE-2024-11597

CVE-2024-11597 affects Ivanti Performance Manager. Insecure permissions under specific conditions in versions 2024.3 HF1, 2024.1 HF1, and 2023.3 HF1 allow a local authenticated attacker to achieve local privilege escalation. The issue is rooted in improper privilege handling within the software. ...

CVE-2024-11597

Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authenticated attacker to achieve local privilege escalation...

December 2024 Security Advisory Ivanti Performance Manager (CVE-2024-11597)

Summary Ivanti has released updates for Performance Manager which address one high severity vulnerability. Successful exploitation could lead to local privilege escalation. We are not aware of any customers being exploited by this vulnerability at the time of disclosure. Vulnerability Details: CV...

Ivanti Performance Manager 安全漏洞

Ivanti Performance Manager is a server and application performance management software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti Performance Manager that stems from improper privilege management. An attacker could exploit the vulnerability to elevate privileges...

PT-2024-17127 · Ivanti · Ivanti Performance Manager

Name of the Vulnerable Software and Affected Versions: Ivanti Performance Manager versions prior to 2024.3 HF1 Ivanti Performance Manager versions prior to 2024.1 HF1 Ivanti Performance Manager versions prior to 2023.3 HF1 Description: Under specific circumstances, insecure permissions in Ivanti...

The vulnerability of the Performance Manager component in the Google Chrome browser allows a hacker to execute arbitrary code.

The vulnerability of the Performance Manager component in the Google Chrome browser relates to the use of memory after it is released. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code through a specially created HTML page from a remote location...

OPENSUSE-SU-2024:0084-1 Security update for chromium

This update for chromium fixes the following issue: Chromium 122.0.6261.128 boo1221335 CVE-2024-2400: Use after free in Performance Manager Chromium 122.0.6261.111 boo1220131,boo1220604,boo1221105 New upstream security release. CVE-2024-2173: Out of bounds memory access in V8. CVE-2024-2174:...

Fedora 38 : chromium (2024-ac1eb810c5)

The remote Fedora 38 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-ac1eb810c5 advisory. upstream security release 122.0.6261.128 - High CVE-2024-2400: Use after free in Performance Manager Tenable has extracted the preceding description block...

Chromium: CVE-2024-2400 Use after free in Performance Manager

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

SUSE CVE-2024-2400

Use after free in Performance Manager in Google Chrome prior to 122.0.6261.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...