5294 matches found
Security Updates for Azure File Sync Agent (February 2024)
The Microsoft Azure File Sync Agent running on the remote host is 16.0 prior to 16.2 or 17.0 prior to 17.1. It is, therefore affected by an elevation of privilege vulnerability. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...
KLA63957 Multiple vulnerabilities in Microsoft Azure
Multiple vulnerabilities were found in Microsoft Azure. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, spoof user interface. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerability in Microsoft Azure Kubernetes Service...
Microsoft Azure Security Vulnerabilities
Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in Microsoft Azure File Sync. The following products and versions are affected: Azure File Sync v17.0,Azure File Sync v16.0,Azure Fil...
Microsoft Azure File Sync Agent Installed (Windows)
Binary data microsoftazurefilesyncagentwininstalled.nbin...
The vulnerability of the snd_hdac_regmap_sync() function in the sound/hda/hdac_regmap.c driver of the Linux High-Definition Audio kernel allows a hacker to cause a service failure.
The vulnerability of the sndhdacregmapsync function in the sound/hda/hdacregmap.c driver of the Linux High-Definition Audio kernel is related to the assignment of a null pointer. Exploiting this vulnerability could allow an attacker to cause a service failure...
AZL-44880 CVE-2024-0229 affecting package xorg-x11-server 1.20.10-6
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...
CVE-2024-0229
CVE-2024-0229 affects the X.Org server (xorg-x11-server). The flaw is an out-of-bounds memory access triggered when a device frozen by a sync grab is reattached to a different master device, potentially causing an application crash, local privilege escalation, or remote code execution in SSH X11 ...
Linux kernel code issue vulnerability
The Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in the Linux kernel that stems from a null pointer dereference in the sndhdacregmapsync method of the sound/hda device driver...
CVE-2023-48645
An issue was discovered in the Archibus app 4.0.3 for iOS. It uses a local database that is synchronized with a Web central server instance every time the application is opened, or when the refresh button is used. There is a SQL injection in the search work request feature in the Maintenance modu...
CVE-2024-0325
In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins...
CVE-2024-0325
In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins...
Command injection
In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins...
CVE-2024-0325 Command Injection in Helix Sync
In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins...
CVE-2024-0325 Command Injection in Helix Sync
In Helix Sync versions prior to 2024.1, a local command injection was identified. Reported by Bryan Riggins...
CVE-2024-0325
CVE-2024-0325 concerns a local command injection in Helix Sync versions prior to 2024.1 . The available documents confirm the vulnerability and its local-execution nature but do not provide concrete details on affected versions beyond the 2024.1 cutoff, the exact vulnerable component, or root cau...
Apache Tomcat 8.5.63 / 9.0.43 HTTP Response Smuggling Vulnerability
Apache Tomcat suffers from a client-side de-sync vulnerability via HTTP request smuggling. Apache Tomcat versions 8.5.7 through 8.5.63 and 9.0.0-M11 through 9.0.43 are vulnerable. Exploit Title: CVE-2024-21733 Apache Tomcat HTTP Request Smuggling Date: 1/31/2024 Exploit Author: xer0dayz Vendor...
Helix Sync Command Injection Vulnerability
perforce Helix Sync is a simplification tool from perforce. A security vulnerability exists in Helix Sync versions prior to 2024.1 that stems from the presence of local command injection...
xorg-x11-server: reattaching to different master device may lead to out-of-bounds memory access
An out-of-bounds memory access flaw was found in the X.Org server. This issue can be triggered when a device frozen by a sync grab is reattached to a different master device. This issue may lead to an application crash, local privilege escalation if the server runs with extended privileges, or...
Important: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 9.0 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
Internet Bug Bounty: CVE-2024-21733 Apache Tomcat HTTP Request Smuggling (Client- Side Desync) (CWE: 444)
SECURITY CVE-2024-21733 Apache Tomcat - Information Disclosure Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Tomcat 9.0.0-M11 to 9.0.43 Apache Tomcat 8.5.7 to 8.5.63 Description: Incomplete POST requests triggered an error response that could contain data fr...