Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from a Thunderbolt monitor being connected during recovery, which could cause the system to hang during recovery...

Intel 2024.3 IPU – SMI Transfer Monitor Security Update

Intel has informed HP of a potential security vulnerability in SMI Transfer monitor STM, which might allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified...

Oracle MySQL Enterprise Monitor (October 2024 CPU)

The versions of MySQL Enterprise Monitor installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory. - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General OpenSSL. Supported versions that ar...

Schneider Electric System Monitor Application Information Disclosure Vulnerability

Schneider Electric System Monitor application is a system monitor program in industrial control equipment from Schneider Electric France. An information disclosure vulnerability exists in the Schneider Electric System Monitor application, which stems from the application's lack of protection of...

Microsoft Azure Monitor Agent Elevation of Privilege Vulnerability

Microsoft Azure Monitor Agent is a lightweight agent program that can be installed on servers or virtual machines in Azure or local environments. An elevation of privilege vulnerability exists in Microsoft Azure Monitor Agent, which is caused by an error in the Monitor Agent component. An attacke...

CVE-2024-45844

BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2022-4972

The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive...

CVE-2022-4972

The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive...

CVE-2022-4972 Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export

The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive...

WordPress plugin Download Monitor 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...

F5 BIG-IP 访问控制错误漏洞

F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. An access control error vulnerability exists in F5 BIG-IP that stems from a monitor feature that could allow an attacker to...

AZL-50433 CVE-2024-21212 affecting package mysql for versions less than 8.0.40-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

AZL-50376 CVE-2024-21212 affecting package mysql for versions less than 8.0.40-1

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

UBUNTU-CVE-2024-21212

Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...

PT-2024-11909 · WordPress · Download Monitor

Name of the Vulnerable Software and Affected Versions: Download Monitor plugin for WordPress versions up to, and including, 4.7.51 Description: The issue is related to a missing capability check on several REST-API routes, specifically those related to reporting, which allows unauthenticated...

Malicious code in firebase-rc-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5050a33312844999e086c6e2ca70d4ded2bfe70479b9cd505ba48564f6c2eb34 The OpenSSF Package Analysis project identified 'firebase-rc-monitor' @ 100.0.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-9279 Malicious code in firebase-rc-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5050a33312844999e086c6e2ca70d4ded2bfe70479b9cd505ba48564f6c2eb34 The OpenSSF Package Analysis project identified 'firebase-rc-monitor' @ 100.0.5 npm as malicious. It is considered malicious because: - The...

CVE-2024-46759

...

MAL-2024-9274 Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Optimizing and Maintaining SQL Server Instance Hosting Veeam Service Provider Console Configuration Database

Purpose This article was produced in coordination with the Veeam R&D team to provide Service Providers with a comprehensive list of the most common performance improvements and maintenance actions relating to the underlying Microsoft SQL Server instance that hosts the Veeam Service Provider Conso...