hwmon: (adc128d818) Fix underflows seen when writing limit attributes

...

Malicious code in firebase-rc-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5050a33312844999e086c6e2ca70d4ded2bfe70479b9cd505ba48564f6c2eb34 The OpenSSF Package Analysis project identified 'firebase-rc-monitor' @ 100.0.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-9279 Malicious code in firebase-rc-monitor (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 5050a33312844999e086c6e2ca70d4ded2bfe70479b9cd505ba48564f6c2eb34 The OpenSSF Package Analysis project identified 'firebase-rc-monitor' @ 100.0.5 npm as malicious. It is considered malicious because: - The...

MAL-2024-9274 Malicious code in gcp-monitor-prod (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8ac49f0f48f0a8f3b5ab417aeeeac247298e9ab4f211f88aadcca93bc624e58 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Optimizing and Maintaining SQL Server Instance Hosting Veeam Service Provider Console Configuration Database

Purpose This article was produced in coordination with the Veeam R&D team to provide Service Providers with a comprehensive list of the most common performance improvements and maintenance actions relating to the underlying Microsoft SQL Server instance that hosts the Veeam Service Provider Conso...

CLSA-2024-1728583613 Fix of 18 CVEs

CVE-url: https://ubuntu.com/security/CVE-2024-46802 - drm/amd/display: added NULL check at start of dcvalidatestream CVE-url: https://ubuntu.com/security/CVE-2024-46818 - drm/amd/display: fix sporadic multiple aux transaction failure - drm/amd/display: Check gpioid before used as array index...

Siemens SINEC Security Monitor Allowed Input License List Vulnerability

SINEC Security Monitor is a modular network security software for passive, non-intrusive, continuous network security monitoring during production processes at customer sites. A Permitted Input Permit List vulnerability exists in Siemens SINEC Security Monitor, which arises from failure to proper...

Siemens SINEC Security Monitor Parameter Injection Vulnerability

SINEC Security Monitor is a modular network security software for passive, non-intrusive, continuous network security monitoring during production processes at customer sites. Siemens SINEC Security Monitor suffers from a parameter injection vulnerability that stems from a failure to properly...

Get-MonitorConfiguration returns an error after DDC/Site upgrade

When admin invokes a cmdlet: Get-MonitorConfiguration, the error is displayed: A database operation failed and could not be recovered : Reason ? CDF Control trace captured on the DDC shows the error: Monitor System Setting 'DisableGoogleAnalytics' exists in the database was loaded but not found i...

Siemens SINEC Security Monitor Path Traversal Vulnerability

SINEC Security Monitor is a modular network security software for passive, non-intrusive, continuous network security monitoring during production processes at customer sites. A path traversal vulnerability exists in Siemens SINEC Security Monitor that originates from not properly validating the...

Siemens SINEC Security Monitor Command Injection Vulnerability

SINEC Security Monitor is a modular network security software for passive, non-intrusive, continuous network security monitoring during production processes at customer sites. Siemens SINEC Security Monitor suffers from a command injection vulnerability that originates from a failure to properly...

Vulnerabilities fixed in Microsoft Azure components

Microsoft has fixed vulnerabilities in several Azure components. A malicious party could exploit the vulnerabilities to grant themselves elevated privileges or execute code with administrator privileges. Azure Monitor: |----------------|------|-------------------------------------| | CVE ID | CVS...

CVE-2024-38097

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-38097

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-38097 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-38097 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-38097

CVE-2024-38097 affects Microsoft Azure Monitor Agent. The vulnerability is an elevation of privilege in the Monitor Agent component, enabling local attacker with Low privileges and no user interaction to gain HIGH integrity and Privilege escalation on affected systems (local vector). Root cause d...

CVE-2024-47563

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable...

CVE-2024-47563

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly validate a file path that is supplied to an endpoint intended to create CSR files. This could allow an unauthenticated remote attacker to create files in writable...

CVE-2024-47562

A vulnerability has been identified in SINEC Security Monitor All versions V4.9.0. The affected application does not properly neutralize special elements in user input to the ssmctl-client command. This could allow an authenticated, lowly privileged local attacker to execute privileged commands i...