CVE-2024-6150

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...

Informational Bulletin: Expedition Installation Script Resets Root Password

A hardcoded password in the Palo Alto Networks Expedition VM installation script may allow remote attackers to elevate their privileges to root access on Expedition VMs that are running Expedition, if not changed as per the installation instructions. The updated version of the script no longer...

Microsoft Azure Network Watcher VM Extension Installed (Windows)

Binary data microsoftazurenetworkwatcherwininstalled.nbin...

Citrix Systems Provisioning Security Vulnerability

Citrix Systems Provisioning is a software streaming technology push technology from Citrix Systems, Inc. It is used to deliver patches, updates, and other configuration information to multiple virtual desktop endpoints via a shared desktop image. A security vulnerability exists in versions prior ...

CVE-2024-6150: Incorrect Authorization

A non-admin user can cause short-term disruption in Target VM availability in Citrix Provisioning...

Microsoft Azure Network Watcher VM Extension < 1.4.3320.1 Elevation of Privilege (CVE-2024-35261)

The version of Microsoft Azure Network Watcher VM Extension installed on the remote Windows host is prior to 1.4.3320.1. It is, therefore, affected by an unspecified elevation of privilege vulnerability. Note that Nessus has not tested for these issues but has instead relied only on the...

CVE-2024-6222

Docker Desktop prior to v4.29.0 is affected: a container breakout can escape to the host via extension- and dashboard-related IPC messages. Vulnerability details show the issue exists in Docker Desktop with Hyper-V backend on MacOS, Linux, and Windows. Remediation per the sources includes fixing ...

CVE-2024-6222 In Docker Desktop before v4.29.0 an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages

In Docker Desktop before v4.29.0, an attacker who has gained access to the Docker Desktop VM through a container breakout can further escape to the host by passing extensions and dashboard related IPC messages. Docker Desktop v4.29.0 https://docs.docker.com/desktop/release-notes/4290 fixes the...

CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

CVE-2024-35261

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

CVE-2024-35261 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

CVE-2024-35261 Azure Network Watcher VM Extension Elevation of Privilege Vulnerability

...

CVE-2024-35261

CVE-2024-35261 affects Microsoft Azure Network Watcher VM Extension. Public sources indicate the Windows VM Extension is vulnerable when installed below version 1.4.3422.1, with a local elevation-of-privilege flaw that could grant high-impact access (confidentiality, integrity, and availability) ...

PT-2024-4982 · Microsoft · Azure Network Watcher Vm Extension

Name of the Vulnerable Software and Affected Versions: Azure Network Watcher VM Extension versions affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Azure Network Watcher VM Extension for Windows, caused by incorrect linking before...

CVE-2024-35261: Improper Link Resolution Before File Access

Azure Network Watcher VM Extension Elevation of Privilege Vulnerability...

PT-2024-30681

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 6.10.2 Description A null pointer dereference issue has been resolved in the Linux kernel. The issue occurs when the KVM SET USER MEMORY REGION and KVM SET USER MEMORY REGION2 ioctls are called on a ucontrol VM,...

Static IP loss when updating to VM Tools for Windows 9.3.3 or earlier

Sometimes, when the drivers for XenServer VM Tools for Windows are updated through Windows Update, the static IP settings are lost and the network settings change to use DHCP. Important: This issue persists when updating from versions earlier than 9.3.3. This issue is fixed for updates from 9.3.3...

PT-2024-29237

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The issue is related to the Linux kernel, specifically with the drm/radeon component. It involves a potential null pointer dereference in the radeon gem va update vm function, which coul...

Mageia: Security Advisory (MGASA-2024-0232)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Updated virtualbox & kmod-virtualbox packages fix security vulnerabilities

Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization component: Core. Supported versions that are affected are Prior to 7.0.16. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle VM VirtualBox executes to compromise...