CVE-2024-30060

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-30060

Azure Monitor Agent Elevation of Privilege Vulnerability...

CVE-2024-30060

The connected PT-2024-3939 advisory identifies Microsoft Azure Monitor Agent as affected. Root cause is an incorrect reference count before accessing a file, enabling privilege escalation via a specially crafted link. Affected versions are not specified, and there is no information about a fix in...

CVE-2024-30060 Azure Monitor Agent Elevation of Privilege Vulnerability

...

CVE-2024-30060 Azure Monitor Agent Elevation of Privilege Vulnerability

...

Azure Monitor Agent Elevation of Privilege Vulnerability

...

KLA67625 PE vulnerability in Microsoft Azure

An elevation of privilege vulnerability was found in Microsoft Azure. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-30060 Exploitation Related products Microsoft-Azure CVE list CVE-2024-30060 critical KB list Solution Install necessary updates fro...

Microsoft Azure Monitor Agent security vulnerabilities

Microsoft Azure is a suite of open, enterprise-grade cloud computing platforms from the U.S.-based Microsoft. An elevation of privilege vulnerability exists in Microsoft Azure Monitor Agent, which stems from the presence of an elevation of privilege vulnerability. An attacker can exploit the...

PT-2024-26242 · Flyfish · Flyfish

Name of the Vulnerable Software and Affected Versions: FlyFish version 3.0.0 Description: The issue is a buffer overflow via the password parameter on the login page, allowing attackers to cause a Denial of Service DoS via a crafted input. This can potentially lead to system compromise...

CVE-2024-30060: Improper Link Resolution Before File Access

Azure Monitor Agent Elevation of Privilege Vulnerability...

May 14, 2024—KB5037781 (OS Build 25398.887)

None None...

Intel® PCM Software Advisory

Summary: A potential security vulnerability in some Intel® Performance Counter Monitor PCM software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2024-21818 Description: Uncontrolled search path i...

PT-2024-21911

Name of the Vulnerable Software and Affected Versions Plantronics Hub versions 3.25.1 and below Description A privilege escalation issue exists in the updater for Plantronics Hub, allowing attackers to gain elevated access. It is recommended to patch immediately and monitor for signs of compromis...

Lunar security vulnerabilities

Lunar is a tool that uses the DDC protocol to change the hardware brightness of a monitor. A security vulnerability exists in Lunar versions 6.0.2 through 6.6.0 that originates from a vulnerability that allows an attacker to perform auxiliary process injection into the Lunar application and abuse...

CVE-2024-20864

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources...

CVE-2024-20864

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources...

PT-2024-18775 · Unknown · Darmanagerservice

Name of the Vulnerable Software and Affected Versions: DarManagerService versions prior to SMR May-2024 Release 1 Description: The issue is related to improper access control in DarManagerService, allowing local attackers to monitor system resources. Recommendations: For versions prior to SMR...

CVE-2024-20864: Undefined Security Weakness

Improper access control vulnerability in DarManagerService prior to SMR May-2024 Release 1 allows local attackers to monitor system resources...

Security Bulletin: VMware Tanzu Spring Framework is vulnerable to multiple security CVEs used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses VMWare Tanzu Spring Framework which is vulnerable to multiple security CVEs. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2024-22262 DESCRIPTION: VMware Tanzu Spring Framewo...

Security Bulletin:Tensorflow, which is vulnerable to multiple security CVEs, is used in IBM Maximo Application Suite - Monitor Component

Summary IBM Maximo Application Suite - Monitor Component uses Tensorflow which is vulnerable to multiple security CVEs. This bulletin identifies the steps to take to address the vulnerabilities. Vulnerability Details CVEID:CVE-2023-25658 DESCRIPTION: TensorFlow is vulnerable to a denial of servic...