CVE-2024-32861 Software House C•CURE - CouchDB executable protection

Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions...

CVE-2024-32861

CVE-2024-32861 affects Software House C•CURE 9000 Site Server (3.00.3 and earlier). Root cause: installer directories containing executables (C:\CouchDB\bin) are given unnecessarily wide permissions. Impact: potential exposure of credentials and other sensitive data; CVSS v3.1 base 7.8 (LOCAL, LO...

Moderate: Red Hat Security Advisory: nodejs security update

An update for nodejs is now available for Red Hat Enterprise Linux 9.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

CVE-2024-32861: Incorrect Default Permissions

Under certain circumstances the impacted Software House C•CURE 9000 installer will utilize unnecessarily wide permissions...

Huawei EulerOS: Security Advisory for nghttp2 (EulerOS-SA-2024-1968)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 9 : nodejs (RHSA-2024:4559)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:4559 advisory. Node.js is a software development platform for building fast and scalable network applications in the JavaScript programming language...

EulerOS 2.0 SP10 : nghttp2 (EulerOS-SA-2024-1916)

According to the versions of the nghttp2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : nghttp2 is an implementation of the Hypertext Transfer Protocol version 2 in C. The nghttp2 library prior to version 1.61.0 keeps reading the...

How to Disable C-States and Turbo Mode on Fujitsu Servers

This article describes how to disable C-States and Turbo Mode on Fujitsu Servers. Virtual Machines display memory spikes and intermittent networking issues. Servers might become unresponsive when C-States are enabled, or restart unexpectedly when turbo mode is on. C-States and Turbo are responsib...

How to Check if Extra C-States are Enabled without Booting into the BIOS

This article describes how to check extra C-States are enabled in the host without rebooting into the BIOS...

CVE-2024-40903

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpmregistersourcecaps There could be a potential use-after-free case in tcpmregistersourcecaps. This could happen when: new say invalid source caps are advertised the existing source...

DEBIAN-CVE-2024-40903

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpmregistersourcecaps There could be a potential use-after-free case in tcpmregistersourcecaps. This could happen when: new say invalid source caps are advertised the existing source...

UBUNTU-CVE-2024-40903

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpmregistersourcecaps There could be a potential use-after-free case in tcpmregistersourcecaps. This could happen when: new say invalid source caps are advertised the existing source...

CVE-2024-40903 usb: typec: tcpm: fix use-after-free case in tcpm_register_source_caps

In the Linux kernel, the following vulnerability has been resolved: usb: typec: tcpm: fix use-after-free case in tcpmregistersourcecaps There could be a potential use-after-free case in tcpmregistersourcecaps. This could happen when: new say invalid source caps are advertised the existing source...

OESA-2024-1844 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

OESA-2024-1843 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

OESA-2024-1845 glibc security update

The GNU C Library project provides the core libraries for the GNU system and GNU/Linux systems, as well as many other systems that use Linux as the kernel. These libraries provide critical APIs including ISO C11, POSIX.1-2008, BSD, OS-specific APIs and more. These APIs include such foundational...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. Linux kernel suffers from a memory misreference vulnerability that originates from a confusion in the instructions responsible for freeing memory in the tcpmregistersourcecaps...

New Poco RAT Targets Spanish-Speaking Victims in Phishing Campaign

Spanish language victims are the target of an email phishing campaign that delivers a new remote access trojan RAT called Poco RAT since at least February 2024. The attacks primarily single out mining, manufacturing, hospitality, and utilities sectors, according to cybersecurity company Cofense...

CVE-2024-32759

Under certain circumstances the Software House C●CURE 9000 installer will utilize weak credentials...

CVE-2024-32759

The CVE-2024-32759 issue affects Johnson Controls Software House C●CURE 9000 installer (versions 2.80 and earlier). Under certain circumstances, the installer uses weak credentials, potentially allowing an attacker to gain administrative access to affected systems via a network attack with low co...