18805 matches found
CVE-2024-26213
Microsoft Brokering File System Elevation of Privilege Vulnerability...
CVE-2024-28907 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2024-28907 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2024-28904
The CVE-2024-28904 entry concerns Microsoft Brokering File System Elevation of Privilege. Connected PT-2024-3309 references insufficient access control in the Brokering File System as the root cause, indicating privilege escalation exists within that component. Public remediation is via Microsoft...
CVE-2024-28904 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2024-28904 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2024-26226 Windows Distributed File System (DFS) Information Disclosure Vulnerability
...
CVE-2024-26213
CVE-2024-26213 is a Microsoft Brokering File System Elevation of Privilege vulnerability in Windows BFS. Root cause: synchronization issues in the Brokering File System shared resource enable local privilege escalation. Impact: Privilege elevation on Windows Server environments using BFS. Exploit...
CVE-2024-26213 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2024-26213 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2024-29066 Windows Distributed File System (DFS) Remote Code Execution Vulnerability
...
CVE-2024-28905 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
CVE-2024-28905 Microsoft Brokering File System Elevation of Privilege Vulnerability
...
USN-6726-1: Linux kernel vulnerabilities
Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...
USN-6726-1 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-bluefield, linux-gcp, linux-gcp-5.4, linux-gkeop, linux-hwe-5.4, linux-ibm, linux-ibm-5.4, linux-kvm, linux-oracle, linux-oracle-5.4, linux-raspi, linux-raspi-5.4 vulnerabilities
Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...
USN-6724-1 linux, linux-aws, linux-azure, linux-azure-6.5, linux-gcp, linux-gcp-6.5, linux-hwe-6.5, linux-laptop, linux-lowlatency, linux-lowlatency-hwe-6.5, linux-oem-6.5, linux-oracle, linux-oracle-6.5, linux-starfive, linux-starfive-6.5 vulnerabilities
Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero length data request, leading to a null pointer dereference vulnerability. An attacker in a guest VM could possibly use this to cause a denial of service host domain crash...
CVE-2024-31978
A vulnerability has been identified in SINEC NMS All versions V2.0 SP2. Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under...
CVE-2024-31978
A vulnerability has been identified in SINEC NMS All versions V2.0 SP2. Affected devices allow authenticated users to export monitoring data. The corresponding API endpoint is susceptible to path traversal and could allow an authenticated attacker to download files from the file system. Under...
CVE-2024-31978
The CVE-2024-31978 issue affects Siemens SINEC NMS (all versions prior to 2.0 SP2). Authentication is required to access the vulnerable API endpoint, which is susceptible to path traversal and could allow an authenticated attacker to download files from the file system; in some cases, downloaded ...
