Lucene search
K

18 matches found

Cvelist
Cvelist
added 2024/03/13 5:51 p.m.17 views

CVE-2024-2433 PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss

An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interfa...

4.3CVSS4.9AI score0.00064EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2024/03/13 5:51 p.m.15 views

CVE-2024-2433 PAN-OS: Improper Privilege Management Vulnerability in Panorama Software Leads to Availability Loss

An improper authorization vulnerability in Palo Alto Networks Panorama software enables an authenticated read-only administrator to upload files using the web interface and completely fill one of the disk partitions with those uploaded files, which prevents the ability to log into the web interfa...

4.3CVSS7.1AI score0.00064EPSS
Exploits0References1
Microsoft KB
Microsoft KB
added 2024/01/09 8:0 a.m.471 views

January 9, 2024—KB5034127 (OS Build 17763.5329) - EXPIRED

January 9, 2024—KB5034127 OS Build 17763.5329 - EXPIRED EXPIRATION NOTICEIMPORTANT As of March 31, 2026, this update is no longer available from the Microsoft Update Catalog or other release channels. We recommend that you update your devices to the latest version of Windows. ​​​​​​​ 11/17/20 For...

8.8CVSS7AI score0.54845EPSS
Exploits6
Microsoft KB
Microsoft KB
added 2024/01/09 8:0 a.m.175 views

January 9, 2024—KB5034129 (OS Build 20348.2227)

January 9, 2024—KB5034129 OS Build 20348.2227 For information about Windows update terminology, see the article about the types of Windows updates and the monthly quality update types. For an overview of Windows Server 2022, see its update history page. Note Follow @WindowsUpdate to find out when...

8.8CVSS8AI score0.54845EPSS
Exploits9
RedHat Linux
RedHat Linux
added 2021/11/09 5:57 p.m.0 views

python-psutil: Double free because of refcount mishandling

A double free issue has been discovered in python-psutil because of the mishandling of refcounts while converting system data into Python objects in functions like psutildiskpartitions, psutilusers, psutilnetifaddrs, and others. In particular cases, a local attacker may be able to get code...

7.5CVSS7.3AI score0.00176EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/10/20 8:2 p.m.2 views

python-psutil: Double free because of refcount mishandling

A double free issue has been discovered in python-psutil because of the mishandling of refcounts while converting system data into Python objects in functions like psutildiskpartitions, psutilusers, psutilnetifaddrs, and others. In particular cases, a local attacker may be able to get code...

7.5CVSS7.3AI score0.00176EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2020/06/23 7:36 p.m.0 views

python-psutil: Double free because of refcount mishandling

A double free issue has been discovered in python-psutil because of the mishandling of refcounts while converting system data into Python objects in functions like psutildiskpartitions, psutilusers, psutilnetifaddrs, and others. In particular cases, a local attacker may be able to get code...

7.5CVSS7.3AI score0.00176EPSS
Exploits0References4
Veracode
Veracode
added 2020/04/10 12:55 a.m.40 views

Denial Of Service (DoS)

kernel is vulnerable to denial of service DoS. The vulnerability exists as a missing validation check was found in the Linux kernel's macpartition implementation, used for supporting file systems created on Mac OS operating systems. A local attacker could use this flaw to cause a denial of servic...

4.9CVSS3.1AI score0.0004EPSS
Exploits1References19Affected Software2
ThreatPost
ThreatPost
added 2019/12/04 6:10 p.m.64 views

Iran Targets Mideast Oil with ZeroCleare Wiper Malware

A freshly-discovered wiper malware dubbed “ZeroCleare” has been deployed to target the energy and industrial sectors in the Middle East. According to IBM’s X-Force Incident Response and Intelligence Services IRIS, ZeroCleare so-named because of the program database pathname of its binary file was...

1.1AI score
Exploits0References10
Prion
Prion
added 2018/05/11 7:29 p.m.9 views

Design/Logic Flaw

Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended search.namequery.com site by modifying data within a disk's inter-partition space. This allows a...

7.2CVSS7.6AI score0.00062EPSS
Exploits1References1Affected Software1
NVD
NVD
added 2018/05/11 7:29 p.m.7 views

CVE-2009-5150

Absolute Computrace Agent V80.845 and V80.866 does not have a digital signature for the configuration block, which allows attackers to set up communication with a web site other than the intended search.namequery.com site by modifying data within a disk's inter-partition space. This allows a...

7.2CVSS6.8AI score0.00062EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2011/06/20 12:0 a.m.48 views

Debian DSA-2264-1 : linux-2.6 - privilege escalation/denial of service/information leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a privilege escalation, denial of service or information leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2524 David Howells reported an issue in the Common...

9.8CVSS7AI score0.01222EPSS
Exploits22References79
securityvulns
securityvulns
added 2011/05/26 12:0 a.m.70 views

[SECURITY] [DSA 2240-1] linux-2.6 security update

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------------------------- Debian Security Advisory DSA-2240-1 [email protected] http://www.debian.org/security/ dann frazier May 24, 2011 http://www.debian.org/security/faq -...

7.8CVSS1.3AI score0.04958EPSS
Exploits21
OSV
OSV
added 2011/05/23 12:0 a.m.35 views

DSA-2240-1 linux-2.6 - several issues

Bulletin has no description...

9.8CVSS7.1AI score0.04958EPSS
Exploits24
Prion
Prion
added 2007/08/17 10:17 p.m.16 views

Code injection

The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions...

4.6CVSS6.8AI score0.00074EPSS
Exploits0References3
NVD
NVD
added 2007/08/17 10:17 p.m.9 views

CVE-2007-4393

The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions...

4.6CVSS6.3AI score0.00074EPSS
Exploits0References3
CVE
CVE
added 2007/08/17 10:0 p.m.50 views

CVE-2007-4393

The CVE-2007-4393 entry describes a local privilege issue in SUSE Linux where the orarun installation script adds the oracle user to the disk group before 20070810, allowing that local oracle user to read or write raw disk partitions. The vulnerability arises from disk group membership enabling a...

4.6CVSS6.3AI score0.00074EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2007/08/17 10:0 p.m.20 views

CVE-2007-4393

The installation script for orarun on SUSE Linux before 20070810 places the oracle user into the disk group, which allows the local oracle user to read or write raw disk partitions...

6.3AI score0.00074EPSS
Exploits0References3
Rows per page
Query Builder