CVE-2025-61667 Datadog Linux Host Agent affected by local privilege escalation due to insufficient pycache permissions

The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...

CVE-2025-59504

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-64773

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit...

CVE-2025-10918

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk...

Security Bulletin: IBM Instana Observability is affected by multiple vulnerabilities within Instana Agent container image

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana within Instana Agent container image build 1.0.308 Vulnerability Details CVEID:CVE-2025-32990 DESCRIPTION: A heap-buffer-overflow off-by-one flaw was found in the GnuTLS software in the template parsing logic withi...

The vulnerability of the software for backup within the cloud platform Acronis Cyber Protect Cloud Agent stems from improper validation of syntax correctness of input data. This allows attackers to trigger service failures.

The vulnerability of the software for backup within the cloud platform Acronis Cyber Protect Cloud Agent is related to improper verification of syntax correctness of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

PT-2025-46696

Name of the Vulnerable Software and Affected Versions Datadog Agent versions 7.65.0 through 7.70.2 Description The Datadog Agent gathers events and metrics from hosts and transmits them to Datadog. A security issue exists in the Datadog Linux Host Agent due to inadequate permissions configured on...

CVE-2025-61667: Incorrect Default Permissions

The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through 7.70.2 exists due to insufficient permissions being set on the opt/datadog-agent/python-scripts/pycache directory during installation. Co...

Datadog Agent 安全漏洞

Datadog Agent is an open source monitor collector from Datadog, Inc. A security vulnerability exists in Datadog Agent versions 7.65.0 through 7.70.2, which stems from insufficient permission settings in the opt/datadog-agent/python-scripts/pycache directory, which may result in local elevation of...

CVE-2025-48878

Combodo iTop is a web based IT service management tool. In versions on the 3.x branch prior to 3.2.2, an insecure direct object reference allows a user e.g. with Service desk agent profile to create a ModuleInstallation object when they shouldn't be able to do so. Version 3.2.2 fixes the issue...

EUVD-2025-84339

Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files anywhere on disk...

CVE-2025-59504

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-59504

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability

...

CVE-2025-59504 Azure Monitor Agent Remote Code Execution Vulnerability

...

EUVD-2025-93453

Heap-based buffer overflow in Azure Monitor Agent allows an unauthorized attacker to execute code locally...

CVE-2025-59504

CVE-2025-59504 is a heap-based buffer overflow vulnerability in Microsoft’s Azure Monitor Agent. Connected sources identify the affected component as the Azure Monitor Agent (Windows), with exploitation possible when running versions prior to 1.37.1. The underlying issue is a heap-based buffer ov...

AWS VDP: AWS Auto Scaling Service Reporting "AWS Internal" for CloudTrail Events Generated from Specific Endpoints

A vulnerability was discovered in the AWS Auto Scaling service, where 6 API endpoints incorrectly reported the user-agent and network information as "AWS Internal" in CloudTrail logs. This allowed the adversary to perform API calls using these endpoints and evade the logging of their IP address a...

CVE-2025-64773

In JetBrains YouTrack before 2025.3.104432 a race condition allowed bypass of helpdesk Agent limit...

CVE-2025-64773

CVE-2025-64773 affects JetBrains YouTrack prior to version 2025.3.104432. Multiple connected sources (NVD/NASL/Nessus and others) describe a race condition that allows bypassing the helpdesk agent limit. Affected component is YouTrack (web/bug-tracking platform); root cause is described as a race...