RHEL 9 : pcp (RHSA-2024:6847)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6847 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...

Performance Co-Pilot 后置链接漏洞

Performance Co-Pilot is an open source software infrastructure for monitoring, visualizing, logging, responding to, and controlling the state, activity, and performance of networks, computers, applications, and servers. Performance Co-Pilot suffers from a back-link vulnerability that originates...

RHEL 8 : pcp (RHSA-2024:6844)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6844 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...

RHEL 9 : pcp (RHSA-2024:6846)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:6846 advisory. Performance Co-Pilot PCP is a suite of tools, services, and libraries for acquisition, archiving, and analysis of system-level performance...

CLSA-2024-1726683307 bind: Fix of CVE-2024-1737

CVE-2024-1737: fix resolver caches and authoritative zone databases to prevent degraded performance when handling client queries for the same hostname...

SUSE CVE-2024-45770

A vulnerability was found in Performance Co-Pilot PCP. This flaw can only be exploited if an attacker has access to a compromised PCP system account. The issue is related to the pmpost tool, which is used to log messages in the system. Under certain conditions, it runs with high-level privileges...

Release Information for Veeam Plug-In for Microsoft Azure 7 Cumulative Patches

Requirements Please confirm that you are running version Veeam Plug-In for Microsoft Azure v7 build 7.0.0.467 or later before upgrading. You can find the currently installed build number Product version in the About section under Configuration | Support Information | Updates. After installing Vee...

CVE-2024-45605 Improper authorization on deletion of user issue alert notifications in sentry

Sentry is a developer-first error tracking and performance monitoring platform. An authenticated user delete the user issue alert notifications for arbitrary users given a know alert ID. A patch was issued to ensure authorization checks are properly scoped on requests to delete user alert...

PT-2024-31759

Name of the Vulnerable Software and Affected Versions: Performance Co-Pilot PCP affected versions not specified Description: A flaw was found in Performance Co-Pilot PCP that allows an attacker to send specially crafted data to the system, which could cause the program to misbehave or crash...

PT-2024-31760

Name of the Vulnerable Software and Affected Versions: Performance Co-Pilot PCP affected versions not specified Description: A vulnerability was found in Performance Co-Pilot PCP, related to the pmpost tool, which is used to log messages in the system. This flaw can only be exploited if an attack...

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: 115.15/128.2 ESR mozilla: Type confusion when looking up a property name in a "with" block CVE-2024-8381 mozilla: Internal event interfaces were exposed to web...

ALSA-2024:6681 Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox: 115.15/128.2 ESR mozilla: Type confusion when looking up a property name in a "with" block CVE-2024-8381 mozilla: Internal event interfaces were exposed to web...

SUSE: Security Advisory (SUSE-SU-2024:3080-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

RHEL 8 : firefox (RHSA-2024:6682)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:6682 advisory. Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. Security Fixes: firefox:...

RHSA-2015:1081 Red Hat Security Advisory: kernel security, bug fix, and enhancement update

Bulletin has no description...

SUSE: Security Advisory (SUSE-SU-2024:3229-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:3222-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Dell InsightIQ Access Control Error Vulnerability (CNVD-2024-38773)

Dell InsightIQ is a performance monitoring and reporting tool from Dell USA. Dell InsightIQ suffers from an Access Control Error vulnerability that stems from incorrect access control. A highly privileged attacker with local access rights could exploit the vulnerability to cause an elevation of...

Monitoring Software Performance Co-Pilot Temporary File Permissions Insecure Symbolic Link

The vulnerability of the Performance Co-Pilot PCP monitoring and performance visualization software is related to the mixed levels of privileges used by systemd services associated with PCP. Exploiting this vulnerability allows an attacker to carry out attacks using symbolic links and to circumve...

Security Bulletin: Multiple Vulnerabilities in IBM Application Performance Management Core Framework.

Summary Multiple vulnerabilities were addressed in IBM Application Performance Management 8.1.4.0 Core Framework IF27 patch. Vulnerability Details CVEID:CVE-2024-21094 DESCRIPTION: An unspecified vulnerability in Java SE related to the VM component could allow a remote attacker to cause no...