July 9, 2024—KB5040498 (Security-only update)

None None...

July 9, 2024—KB5040485 (Monthly Rollup)

None None...

August 13, 2024—KB5041847 (Security-only update)

None None...

August 13, 2024—KB5041851 (Monthly Rollup)

None None...

August 13, 2024—KB5041828 (Monthly Rollup)

None None...

CVE-2024-7715 D-Link DNS-1550-04 photocenter_mgr.cgi sprintf command injection

UNSUPPORTED WHEN ASSIGNED A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20240812. It has been...

CVE-2024-7715

CVE-2024-7715 affects D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04. The root cause is a vulnerability in the function sprintf within...

KB5041583: Servicing stack update for Windows 10: August 13, 2024

None None...

KB5041576: Servicing stack update for Windows 10, version 1607 and Server 2016: August 13, 2024

None None...

CVE-2024-38168

.NET and Visual Studio Denial of Service Vulnerability...

KB5041588: Servicing stack update for Windows Server 2012 R2: August 13, 2024

KB5041588: Servicing stack update for Windows Server 2012 R2: August 13, 2024 End of support information Windows 8.1 reached end of support EOS on January 10, 2023, at which point technical assistance and software updates are no longer provided. If you have devices running Windows 8.1, we recomme...

CVE-2024-36460

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text...

CVE-2024-36460

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text...

CVE-2024-36460

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text...

DEBIAN-CVE-2024-36460

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text...

Zabbix 安全漏洞

Zabbix is an open source monitoring system from Zabbix. The system supports network monitoring, server monitoring, cloud monitoring and application monitoring. A security vulnerability exists in Zabbix versions 5.0.42, 6.0.30, 6.4.15, and 7.0.0, which stems from a front-end audit log that allows...

PT-2024-29977 · Etcd +2 · Etcd +2

Name of the Vulnerable Software and Affected Versions: Kamaji versions 1.0.0 and earlier Description: The issue arises from Kamaji using an "open at the top" range definition in RBAC for etcd roles, allowing some TCPs API servers to read, write, and delete the data of other control planes. This c...

CVE-2024-36460

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text...

CVE-2024-36460 Front-end audit log shows passwords in plaintext

The front-end audit log allows viewing of unprotected plaintext passwords, where the passwords are displayed in plain text...

CVE-2024-36460

CVE-2024-36460 affects Zabbix frontend: the audit log can display passwords in plaintext, creating an information-disclosure risk. The vulnerability is tied to the Zabbix frontend component and has been addressed in some distributions (e.g., Debian bullseye package 1:5.0.44+dfsg-1+deb11u1; Fedora...