215 matches found
AMD Graphics Vulnerabilities – August 2025
Summary Audits performed on AMD graphics and datacenter accelerator products, as well as external reports received by AMD, uncovered potential vulnerabilities affecting AMD graphics, datacenter, and some client processors...
CVE-2022-25841
Uncontrolled search path elements in the IntelR Datacenter Group Event Android application, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
Support for Tunneling Syslog to On Premise Datacenter when using Adaptive Authentication on Cloud
Configure external syslog server when using Adaptive Authentication on Cloud...
RHEL 7 : kernel-aarch64 (RHSA-2017:0372)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:0372 advisory. The kernel-aarch64 package contain the Linux kernel, the core of any Linux operating system. Security Fixes: A race condition was found in t...
Incorrect Authorization
Overview org.apache.cassandra:cassandra-all is a maven plugin for the Apache Cassandra Project. Which, develops a highly scalable second-generation distributed database, bringing together Dynamo's fully distributed design and Bigtable's ColumnFamily-based data model. Affected versions of this...
GHSA-3CJF-FWCQ-XH22 Apache Cassandra: CassandraNetworkAuthorizer and CassandraCIDRAuthorizer can be bypassed allowing access to different network regions
Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer. Users with restricted data center access can update their own permissions via data control...
CVE-2025-24860
Incorrect Authorization vulnerability in Apache Cassandra allowing users to access a datacenter or IP/CIDR groups they should not be able to when using CassandraNetworkAuthorizer or CassandraCIDRAuthorizer. Users with restricted data center access can update their own permissions via data control...
November 12, 2024—Hotpatch KB5046698 (OS Build 20348.2819)
None None...
CVE-2022-48916
CVE-2022-48916 affects the Linux kernel IOMMU VT-d path when enabling Volume Management Device (VMD) in scalable mode. The issue manifests as a kernel panic during boot (Eagle Stream/Sapphire Rapids), traced to a double list_add in the VMD/IOMMU enable path. The connected documents reference upst...
CVE-2022-48916 iommu/vt-d: Fix double list_add when enabling VMD in scalable mode
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d: Fix double listadd when enabling VMD in scalable mode When enabling VMD and IOMMU scalable mode, the following kernel panic call trace/kernel log is shown in Eagle Stream platform Sapphire Rapids CPU during booting: p...
June 11, 2024—Hotpatch KB5039330 (OS Build 20348.2522)
None None...
Bitbucket Datacenter REST API allows non-admin users to query all groups and members of the group
h3. Issue Summary Non-admin users any licensed user can query all the groups and members of the groups using the below API Groups API|https://developer.atlassian.com/server/bitbucket/rest/v819/api-group-permission-management/api-api-latest-admin-groups-get Group memberships...
2024-03 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5035959)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...
datacenter.arizton.com Cross Site Scripting vulnerability OBB-3861581
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
February 13, 2024—Hotpatch KB5034860 (OS Build 20348.2277)
None None...
2023-09 Cumulative security Hotpatch for Azure Stack HCI, version 21H2 and Windows Server 2022 Datacenter: Azure Edition for x64-based Systems (KB5030325)
Install this update to resolve issues in Windows. For a complete listing of the issues that are included in this update, see the associated Microsoft Knowledge Base article for more information...
datacenter-forum.ro Cross Site Scripting vulnerability OBB-3457658
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Lavasoft 4.1.0.409 Unquoted Service Path
Exploit Title: Lavasoft web companion 4.1.0.409 - 'DCIservice' Unquoted Service Path Author: P4p4 M4n3 Discovery Date: 25-11-2022 Vendor Homepage: https://webcompanion.com/en/ Version 4.1.0.409 Tested on: Microsoft Windows Server 2019 Datacenter x64 Description: Lavasoft 4.1.0.409 install...
Lavasoft web companion 4.1.0.409 - 'DCIservice' Unquoted Service Path
Exploit Title: Lavasoft web companion 4.1.0.409 - 'DCIservice' Unquoted Service Path Author: P4p4 M4n3 Discovery Date: 25-11-2022 Vendor Homepage: https://webcompanion.com/en/ Version 4.1.0.409 Tested on: Microsoft Windows Server 2019 Datacenter x64 Description: Lavasoft 4.1.0.409 install...
Microsoft threat intelligence presented at CyberWarCon 2022
At CyberWarCon 2022, Microsoft and LinkedIn analysts presented several sessions detailing analysis across multiple sets of actors and related activity. This blog is intended to summarize the content of the research covered in these presentations and demonstrates Microsoft Threat Intelligence...