Updated aide & mhash packages fix security vulnerability

AIDE before 0.17.4 allows local users to obtain root privileges via crafted file metadata such as XFS extended attributes or tmpfs ACLs, because of a heap-based buffer overflow. CVE-2021-45417...

CVE-2022-36407

CVE-2022-36407 affects Hitachi Disk Array Systems, where the issue (Insertion of Sensitive Information into Log File) allows local users to gain sensitive information via log files. Concrete details are available in the connected sources: affected families include Hitachi Virtual Storage Platform...

CVE-2024-0638

Least privilege violation in the Checkmk agent plugins mkoracle, mkoracle.ps1, and mkoraclecrs before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows local users to escalate privileges...

CVE-2024-28824 Privilege escalation in mk_informix plugin

Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows local users to escalate privileges...

CVE-2024-0638 Privilege escalation in mk_oracle plugins

Least privilege violation in the Checkmk agent plugins mkoracle, mkoracle.ps1, and mkoraclecrs before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows local users to escalate privileges...

CVE-2024-0638 Privilege escalation in mk_oracle plugins

Least privilege violation in the Checkmk agent plugins mkoracle, mkoracle.ps1, and mkoraclecrs before Checkmk 2.3.0b4 beta, 2.2.0p24, 2.1.0p41 and 2.0.0 EOL allows local users to escalate privileges...

CVE-2024-22352

IBM InfoSphere Information Server 11.7 stores potentially sensitive information in log files that could be read by a local user. IBM X-Force ID: 280361...

CVE-2024-25654

Insecure permissions for log files of AVSystem Unified Management Platform UMP 23.07.0.16567LTS allow members with local access to the UMP application server to access credentials to authenticate to all services, and to decrypt sensitive data stored in the database...

MGASA-2024-0071 Updated multipath-tools packages fix security vulnerabilities

multipath-tools 0.7.7 through 0.9.x before 0.9.2 allows local users to obtain root access, as exploited in conjunction with CVE-2022-41974. Local users able to access /dev/shm can change symlinks in multipathd due to incorrect symlink handling, which could lead to controlled file writes outside o...

Mageia: Security Advisory (MGASA-2024-0065)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cisco Unified IP Phones 7900 Permissions, Privileges, and Access Controls (CVE-2011-1603)

Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.2.1 allow local users to gain privileges via unspecified vectors, aka Bug ID CSCtn65815. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL...

Cisco Unified IP Phones 7900 Permissions, Privileges, and Access Controls (CVE-2011-1602)

The su utility on Cisco Unified IP Phones 7900 devices aka TNP phones with software before 9.0.3 allows local users to gain privileges via unspecified vectors, aka Bug ID CSCtf07426. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more...

Cisco Unified IP Phone 9900 Series Denial of Service (CVE-2015-0601)

Cisco Unified IP 9900 phones with firmware 9.4.1 and earlier allow local users to cause a denial of service device reload via crafted commands, aka Bug ID CSCup92790. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEV...

MGASA-2024-0065 Updated ncurses packages fix security vulnerability

The updated packages fix a security vulnerability: Local users can trigger security-relevant memory corruption via malformed data. CVE-2023-29491...

SUSE CVE-2023-28746

Information exposure through microarchitectural state after transient execution from some register files for some IntelR AtomR Processors may allow an authenticated user to potentially enable information disclosure via local access...

CVE-2023-6814

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 before 11-20-07, from 11-10 before 11-10-10, from 11-...

Design/Logic Flaw

Insertion of Sensitive Information into Log File vulnerability in Hitachi Cosminexus Component Container allows local users to gain sensitive information.This issue affects Cosminexus Component Container: from 11-30 before 11-30-05, from 11-20 through 11-20-, from 11-10 through 11-10-, from 11-00...

Hitachi Cosminexus Log Information Disclosure Vulnerability

Hitachi Cosminexus is a high-performance, highly reliable collaborative e-business platform from Hitachi, Ltd. It is used to rapidly build and run mission-critical systems. A log information disclosure vulnerability exists in Hitachi Cosminexus versions 11-30 through 11-30-05, 11-20 through 11-20...

PT-2024-15098 · Hitachi · Hitachi Cosminexus Component Container

Name of the Vulnerable Software and Affected Versions: Hitachi Cosminexus Component Container versions 11-00 through 11-00-12 Hitachi Cosminexus Component Container versions 11-10 through 11-10-10 Hitachi Cosminexus Component Container versions 11-20 through 11-20-07 Hitachi Cosminexus Component...

Ubuntu 20.04 LTS / 22.04 LTS : AccountsService vulnerability (USN-6687-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-6687-1 advisory. It was discovered that AccountsService called a helper incorrectly when performing password change operations. A local attacker could possibly use thi...