9663 matches found
CVE-2024-50003: NULL Pointer Dereference
In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Fix system hang while resume with TBT monitor Why Connected with a Thunderbolt monitor and do the suspend and the system may hang while resume. The TBT monitor HPD will be triggered during the resume procedure an...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from potential post-release reuse of the ibmpex driver in the hwmon component in the event of a registration...
PT-2024-33871
Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 6.6.58 Description: The issue arises because, upon closing the file descriptor, the active performance monitor is not stopped. Although all perfmons are destroyed, the active performance monitor's pointer is sti...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from the drm/v3d module not stopping active monitors before destroying the performance monitor...
Intel 2024.3 IPU – SMI Transfer Monitor Security Update
Intel has informed HP of a potential security vulnerability in SMI Transfer monitor STM, which might allow escalation of privilege. Intel is releasing microcode updates to mitigate this potential vulnerability. Intel has released updates to mitigate the potential vulnerability. HP has identified...
Microsoft Azure Monitor Agent Elevation of Privilege Vulnerability
Microsoft Azure Monitor Agent is a lightweight agent program that can be installed on servers or virtual machines in Azure or local environments. An elevation of privilege vulnerability exists in Microsoft Azure Monitor Agent, which is caused by an error in the Monitor Agent component. An attacke...
Oracle MySQL Enterprise Monitor (October 2024 CPU)
The versions of MySQL Enterprise Monitor installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2024 CPU advisory. - Vulnerability in the MySQL Enterprise Monitor product of Oracle MySQL component: Monitoring: General OpenSSL. Supported versions that ar...
Schneider Electric System Monitor Application Information Disclosure Vulnerability
Schneider Electric System Monitor application is a system monitor program in industrial control equipment from Schneider Electric France. An information disclosure vulnerability exists in the Schneider Electric System Monitor application, which stems from the application's lack of protection of...
CVE-2024-45844
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2022-4972
The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive...
CVE-2022-4972
The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive...
CVE-2022-4972 Download Monitor <= 4.7.51 - Missing Authorization to Unauthenticated Data Export
The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive...
PT-2024-7020
Name of the Vulnerable Software and Affected Versions F5 BIG-IP versions prior to 17.1.1.4 F5 BIG-IP versions prior to 16.1.5 F5 BIG-IP versions prior to 15.1.10.5 Description The issue is related to the BIG-IP monitor functionality, which may allow an attacker to bypass access control...
CVE-2022-4972: Missing Authorization
The Download Monitor plugin for WordPress is vulnerable to authorization bypass due to a missing capability check on several REST-API routes related to reporting in versions up to, and including, 4.7.51. This makes it possible for unauthenticated attackers to view user data and other sensitive...
F5 BIG-IP Access Control Vulnerability
F5 BIG-IP is an application delivery platform that integrates network traffic management, application security management, load balancing, and other features from F5 USA. An access control error vulnerability exists in F5 BIG-IP that stems from a monitor feature that could allow an attacker to...
CVE-2024-45844: Missing Authentication for Critical Function
BIG-IP monitor functionality may allow an attacker to bypass access control restrictions, regardless of the port lockdown settings. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
WordPress Plugin Download Monitor has a security vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL. WordPress plugin is an application plugin. A security vulnerability exists in...
AZL-50433 CVE-2024-21212 affecting package mysql for versions less than 8.0.40-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...
AZL-50376 CVE-2024-21212 affecting package mysql for versions less than 8.0.40-1
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...
UBUNTU-CVE-2024-21212
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Health Monitor. Supported versions that are affected are 8.0.39 and prior and 8.4.0. Difficult to exploit vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL Serve...