OPENSUSE-SU-2024:13341-1 zabbix-agent-6.0.22-1.1 on GA media

These are all security issues fixed in the zabbix-agent-6.0.22-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2024:11868-1 libpolkit-agent-1-0-0.120-3.1 on GA media

These are all security issues fixed in the libpolkit-agent-1-0-0.120-3.1 package on the GA media of openSUSE Tumbleweed...

CVE-2024-36459 Cross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent

A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser...

CVE-2024-36459 Cross-Site Scripting Vulnerability in Symantec SiteMinder Web Agent

A CRLF cross-site scripting vulnerability has been identified in certain configurations of the SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server. As a result, an attacker can execute arbitrary Javascript code in a client browser...

PT-2024-27013 · Ca Technologies · Siteminder Web Agent For Domino Web Server +1

Name of the Vulnerable Software and Affected Versions: SiteMinder Web Agent for IIS Web Server affected versions not specified SiteMinder Web Agent for Domino Web Server affected versions not specified Description: A CRLF cross-site scripting issue has been identified in certain configurations of...

Broadcom Symantec SiteMinder Security Vulnerability

Broadcom Symantec SiteMinder is an identity provider and federation system from Broadcom, Inc. Provides access to web applications and portals. A security vulnerability exists in Broadcom Symantec SiteMinder Web Agent for IIS Web Server and SiteMinder Web Agent for Domino Web Server, which stems...

CVE-2024-5907

A privilege escalation PE vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficul...

CVE-2024-5909

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a low privileged local Windows user to disable the agent. This issue may be leveraged by malware to disable the Cortex XDR agent and then to perform malicious activity...

CVE-2024-5907

A privilege escalation PE vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices enables a local user to execute programs with elevated privileges. However, execution does require the local user to successfully exploit a race condition, which makes this vulnerability difficul...

CVE-2024-5909

CVE-2024-5909 affects Palo Alto Networks Cortex XDR Agent on Windows. A protection mechanism flaw lets a low-privileged local Windows user disable the Cortex XDR Agent, potentially enabling malware to perform malicious activity after disabling protection. Connected documents consistently referenc...

CVE-2024-5907

CVE-2024-5907 concerns a local privilege-escalation in the Windows Cortex XDR Agent by Palo Alto Networks. The vulnerability arises in the agent’s handling of certain timing races, requiring a local user to exploit a race condition to execute programs with elevated privileges. Exploitation is des...

CVE-2024-5905 Cortex XDR Agent: Local Windows User Can Disrupt Functionality of the Agent

A problem with a protection mechanism in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local low privileged Windows user to disrupt some functionality of the agent. However, they are not able to disrupt Cortex XDR agent protection mechanisms using this vulnerability...

CVE-2024-5905

The CVE-2024-5905 issue concerns the Palo Alto Networks Cortex XDR Agent (Windows). A flaw in the agent’s protection mechanism allows a local, low-privileged Windows user to disrupt some agent functionality, without defeating the protection mechanisms themselves. The available sources identify th...

Dell Common Event Enabler 代码问题漏洞

The Dell Common Event Enabler is used to provide a working environment for the Common Antivirus Agent CAVA and Common Event Publishing Agent CEPA programs. A deserialization vulnerability exists in Dell Common Event Enabler. A local attacker could exploit this vulnerability to cause arbitrary cod...

PT-2024-4315 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: The issue is related to a flaw in the source confirmation mechanism of the Palo Alto Networks Cortex XDR Agent, which can be exploited to impact the system's...

Palo Alto Networks Cortex XDR Security Vulnerability

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A security vulnerability exists in the Palo Alto Networks Cortex XDR Agent Windows that stems from a security issue in...

Palo Alto Networks Cortex XDR Security Vulnerability

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from U.S.-based Palo Alto Networks. A security vulnerability exists in the Palo Alto Networks Cortex XDR Agent Windows, which stems from a faulty...

Palo Alto Networks Cortex XDR Security Vulnerability

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, Inc. in the United States. A security vulnerability exists in Palo Alto Networks Cortex XDR Agent Windows that originates...

PT-2024-4212 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: A privilege escalation vulnerability in the Palo Alto Networks Cortex XDR agent on Windows devices allows a local user to execute programs with elevated...

PT-2024-4210 · Palo Alto Networks · Palo Alto Networks Cortex Xdr Agent

Name of the Vulnerable Software and Affected Versions: Palo Alto Networks Cortex XDR Agent affected versions not specified Description: The issue is related to insecure privilege management in the Palo Alto Networks Cortex XDR Agent, which can be exploited to cause a denial of service. A problem...