84 matches found
CVE-2025-56432
A cross-site scripting XSS vulnerability exists in Nagios XI 2024R2. The vulnerability allows remote attackers to execute arbitrary JavaScript in the context of a logged-in user's session via a specially crafted URL. The issue resides in a web component responsible for rendering performance-relat...
CVE-2021-28216
BootPerformanceTable pointer is read from an NVRAM variable in PEI. Recommend setting PcdFirmwarePerformanceDataTableS3Support to FALSE...
CVE-2012-1292
Unspecified vulnerability in the MessagingSystem servlet in SAP NetWeaver 7.0 allows remote attackers to obtain sensitive information about the MessagingSystem Performance Data via unspecified vectors...
CVE-2024-10405
Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...
CVE-2024-10405 Weak TLS Ciphers on Brocade SANnav port 443 & 18082
Brocade SANnav before SANnav 2.3.1b enables weak TLS ciphers on ports 443 and 18082. In case of a successful exploit, an attacker can read Brocade SANnav data stream that includes monitored Brocade Fabric OS switches performance data, port status, zoning information, WWNs, IP Addresses, but no...
CVE-2024-10405
CVE-2024-10405 affects Brocade SANnav prior to 2.3.1b. The issue enables weak TLS ciphers on ports 443 and 18082, allowing a networked attacker to read the SANnav data stream containing monitored Fabric OS switches performance data, port status, zoning information, WWNs, and IP addresses. The des...
Cisco ThousandEyes Endpoint Agent Privilege Escalation
The vulnerability of the software tool for collecting network performance and Cisco ThousandEyes Endpoint Agent application data is related to errors in the certificate validation process. Exploiting this vulnerability can allow an attacker to increase their privileges remotely...
FreeBSD : icinga2 -- TLS Certificate Validation Bypass (0a82bc4d-a129-11ef-8351-589cfc0f81b0)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0a82bc4d-a129-11ef-8351-589cfc0f81b0 advisory. The Icinga project reports: Icinga is a monitoring system which checks the availability of network...
CVE-2024-49369 Icinga 2 has a TLS Certificate Validation Bypass for JSON-RPC and HTTP API Connections
Icinga is a monitoring system which checks the availability of network resources, notifies users of outages, and generates performance data for reporting. The TLS certificate validation in all Icinga 2 versions starting from 2.4.0 was flawed, allowing an attacker to impersonate both trusted clust...
CVE-2024-34652
Incorrect authorization in kperfmon prior to SMR Sep-2024 Release 1 allows local attackers to access information related to performance including app usage...
Windows Performance Data Helper Code Execution
The vulnerability of the Windows operating system’s Performance Data Helper library is related to integer overflow. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
Microsoft Windows Performance Data Helper Library Code Execution
The vulnerability of the Microsoft Windows Performance Data Helper Library in Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
Microsoft Windows Performance Data Helper Library Code Execution
The vulnerability of the Microsoft Windows Performance Data Helper Library in Windows operating systems is related to the execution of operations outside of the buffer in memory. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...
How to Collect a Citrix Diagnostic Facility (CDF) Trace at System Startup
The CDFControl utility is an event tracing controller or consumer for capturing Citrix Diagnostic Facility CDF trace messages displayed from various Citrix tracing providers. It is made to troubleshoot complex Citrix related issues, parse filter support, and collect performance data. To download...
CVE-2024-38028
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability...
CVE-2024-38025
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability...
CVE-2024-38028
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability...
CVE-2024-38025
Microsoft Windows Performance Data Helper Library Remote Code Execution Vulnerability...