CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently,...

CVE-2024-45207

CVE-2024-45207 affects Veeam Agent for Windows (Microsoft Windows) where DLL injection can occur if PATH contains insecure directories. The agent searches PATH for DLLs and may load a malicious DLL placed in those directories, enabling code execution with potential unauthorized access, data theft...

CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently,...

CVE-2024-45207

DLL injection in Veeam Agent for Windows can occur if the system's PATH variable includes insecure locations. When the agent runs, it searches these directories for necessary DLLs. If an attacker places a malicious DLL in one of these directories, the Veeam Agent might load it inadvertently,...

Veeam Agent for Windows 安全漏洞

Veeam Agent for Windows is a data protection and disaster recovery solution for physical and virtual machines from Veeam USA. A security vulnerability exists in Veeam Agent for Windows 6.2 and prior versions 6.X. The vulnerability stems from the presence of a DLL injection vulnerability, which...

The vulnerability of the kasan component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the kasan component in the Linux operating system’s kernel is related to errors in reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the DHCP server of TP-Link’s Wi-Fi router software, the VN020 F3v(T), allows a intruder to cause a service failure.

The vulnerability of the DHCP server of TP-Link’s Wi-Fi router model VN020 F3vT lies in the issue where operations are performed outside the buffer in memory when processing the hostname parameter. Exploiting this vulnerability allows an attacker to cause a service failure by sending specially...

The vulnerability of the uvc kernel component in the Linux operating system, which allows a hacker to trigger a service failure

The vulnerability of the uvc component in the Linux operating system is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of components related to DRM/AMD/AMDKFD in the Linux operating system allows a hacker to trigger a service failure.

The vulnerability of the DRM/AMD/AMDKFD component in Linux operating systems is related to improper initialization. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the xdp component in the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the xdp component in the Linux operating system’s kernel is related to the pointer to NULL. Exploiting this vulnerability can allow an attacker to cause a service failure...

The vulnerability of the proc/vmcore components of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the proc/vmcore components in the Linux operating system’s kernel is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...

DEBIAN-CVE-2024-52815

Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects su...

UBUNTU-CVE-2024-52815

Synapse is an open-source Matrix homeserver. Synapse versions before 1.120.1 fail to properly validate invites received over federation. This vulnerability allows a malicious server to send a specially crafted invite that disrupts the invited user's /sync functionality. Synapse 1.120.1 rejects su...

The vulnerability of the Mitsubishi Electric FA Connector in the GENESIS64 SCADA system allows a intruder to gain unauthorized access to read, modify, or delete data, execute arbitrary code, or cause a service failure.

The vulnerability of the Mitsubishi Electric FA Connector in the GENESIS64 SCADA system is related to the presence of unused code. Exploiting this vulnerability could allow an intruder to gain unauthorized access to read, modify, or delete data, execute arbitrary code, or cause service failures...

The vulnerability of the microprogrammed software of industrial routers Billion M100, Billion M150, Billion M120N, and Billion M500 lies in the absence of authentication for a critical function. This allows attackers to circumvent security restrictions, gain unauthorized access to protected information, or cause service failures.

The vulnerability of the microprogrammed software in industrial routers such as Billion M100, Billion M150, Billion M120N, and Billion M500 is related to the absence of authentication for a critical function. Exploiting this vulnerability can allow an attacker, operating remotely, to circumvent...

DEBIAN-CVE-2024-53259

quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IPPMTUDISCDO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceed...

AZL-53807 CVE-2024-53259 affecting package coredns for versions less than 1.11.1-16

quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IPPMTUDISCDO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceed...

UBUNTU-CVE-2024-53259

quic-go is an implementation of the QUIC protocol in Go. An off-path attacker can inject an ICMP Packet Too Large packet. Since affected quic-go versions used IPPMTUDISCDO, the kernel would then return a "message too large" error on sendmsg, i.e. when quic-go attempts to send a packet that exceed...

The vulnerability of BigDL’s software, related to the transmission of critical information in open text, allows a perpetrator to trigger a service failure.

The vulnerability of BigDL software is related to the transmission of critical information in open text. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures...

The vulnerability of the f2fs component of the Linux operating system’s kernel, which allows a hacker to cause a service failure

The vulnerability of the f2fs component of the Linux operating system’s kernel is related to damage to the f2fsinitpagearraycache function. Exploiting this vulnerability can allow an attacker to access confidential information...