CVE-2024-5828

Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manager: before 8.8.7-00...

CVE-2024-5828

Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manager: before 8.8.7-00...

CVE-2024-5828 EL Injection Vulnerability in Hitachi Tuning Manager

Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manager: before 8.8.7-00...

CVE-2024-5828 EL Injection Vulnerability in Hitachi Tuning Manager

Expression Language Injection vulnerability in Hitachi Tuning Manager on Windows, Linux, Solaris allows Code Injection.This issue affects Hitachi Tuning Manager: before 8.8.7-00...

CVE-2024-5828

CVE-2024-5828 is a hitachi Tuning Manager EL (Expression Language) Injection vulnerability. Affects Hitachi Tuning Manager before version 8.8.7-00 on Windows, Linux, and Solaris. Root cause: improper handling of the expression language that enables code injection. Impact is high: allows arbitrary...

The vulnerability of the Oracle Solaris operating system’s Utility component, which allows a intruder to gain unauthorized access to protected information

The vulnerability of the Oracle Solaris operating system’s Utility component is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2024-21151

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successfu...

CVE-2024-21151

Vulnerability in the Oracle Solaris product of Oracle Systems component: Filesystem. The supported version that is affected is 11. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Solaris executes to compromise Oracle Solaris. Successfu...

CVE-2024-21151

CVE-2024-21151 affects Oracle Solaris 11 (Filesystem). The vulnerability in the Filesystem component allows a local, low-privilege attacker with logon to the host to cause a partial denial of service on Solaris. The CVSS 3.1 base score is 3.3 (LOW). Remediation referenced in Oracle July 2024 CPU:...

CVE-2022-48827 NFSD: Fix the behavior of READ near OFFSET_MAX

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d "NFS: Always provide aligned buffers to the RPC read layers" on the client, a read of 0xfff is aligned up to server rsize of 0x1000. As a...

CVE-2022-48827 NFSD: Fix the behavior of READ near OFFSET_MAX

In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d "NFS: Always provide aligned buffers to the RPC read layers" on the client, a read of 0xfff is aligned up to server rsize of 0x1000. As a...

CISA Red Team’s Operations Against a Federal Civilian Executive Branch Organization Highlights the Necessity of Defense-in-Depth

EXECUTIVE SUMMARY In early 2023, the Cybersecurity and Infrastructure Security Agency CISA conducted a SILENTSHIELD red team assessment against a Federal Civilian Executive Branch FCEB organization. During SILENTSHIELD assessments, the red team first performs a no-notice, long-term simulation of...

Security Bulletin: Multiple vulnerabilities in IBM WebSphere Application Server Liberty and libcurl may affect IBM Storage Protect Backup-Archive Client

Summary IBM Storage Protect Backup-Archive Client can be affected by security flaws in IBM WebSphere Application Server Liberty and libcurl. The flaws can lead to weaker than expected security for outbound TLS connections and bypass of security restrictions, as described in the "Vulnerability...

Oracle Solaris Critical Patch Update : apr2024_SRU11_3_36_33_1

The version of Solaris installed on the remote host is prior to 11.3.36.33.1. It is, therefore, affected by a vulnerability as referenced in the solaris11apr2024SRU11336331 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that is...

The vulnerability of the Oracle Solaris operating system’s Utility component, which allows a hacker to compromise the system

The vulnerability of the Oracle Solaris operating system’s Utility component is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to compromise the system...

The vulnerability of the Oracle Solaris operating system’s Zones component, allowing a hacker to execute arbitrary code

The vulnerability of the Zones component in the Oracle Solaris operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Vulnerabilities fixed in Oracle Systems

Oracle has fixed vulnerabilities in components of System Software. A malicious person with physical access to the hardware, or local access to the infrastructure, can exploit the vulnerabilities to exploit attacks that could result in the following categories of damage: Cross-Site Scripting XSS...

Oracle Solaris Critical Patch Update : apr2024_SRU11_4_66_164_1

The version of Solaris installed on the remote host is prior to 11.4.66.164.1. It is, therefore, affected by multiple vulnerabilities as referenced in the solaris11apr2024SRU114661641 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Zones. The supported version...

Oracle Solaris Critical Patch Update : apr2024_SRU11_4_54_138_1

The version of Solaris installed on the remote host is prior to 11.4.54.138.1. It is, therefore, affected by a vulnerability as referenced in the solaris11apr2024SRU114541381 advisory. - Vulnerability in the Oracle Solaris product of Oracle Systems component: Utility. The supported version that i...

Unspecified Vulnerability in Oracle Solaris (CNVD-2024-25259)

Oracle Solaris is a UNIX operating system from Oracle. A security vulnerability exists in Oracle Systems' Oracle Solaris. An attacker could exploit this vulnerability to gain access to data...