CVE-2024-46971 GPU DDK - UAF of memory in PMRUnlockSysPhysAddressesLocalMem for on-demand PMRs on PCI (LMA) systems

Software installed and run as a non-privileged user may conduct GPU system calls to read and write freed physical memory from the GPU...

GO-2024-3248 KubeSphere IDOR vulnerability in github.com/kubesphere/kubesphere

An Insecure Direct Object Reference IDOR vulnerability in KubeSphere allows low-privileged authenticated attackers to access sensitive resources without proper authorization checks. NOTE: A fix is expected in v4.1.3 in January 2025...

Seven Bolt-Ons to Make Your Entra ID More Secure for Critical Sessions

Identity security is all the rage right now, and rightfully so. Securing identities that access an organization's resources is a sound security model. But IDs have their limits, and there are many use cases when a business should add other layers of security to a strong identity. And this is what...

K000148895: Intel UEFI firmware vulnerabilities CVE-2023-2235, CVE-2023-23904, and CVE-2023-25546

Security Advisory Description CVE-2023-22351 Out-of-bounds write in UEFI firmware for some IntelR Processors may allow a privileged user to potentially enable escalation of privilege via local access. CVE-2023-23904 NULL pointer dereference in the UEFI firmware for some IntelR Processors may allo...

One Identity Named Winner of the Coveted Top InfoSec Innovator Awards for 2024

One Identity wins "Hot Company: Privileged Access Management" at the 12th Cyber Defense Magazine InfoSec Innovator Awards, showcasing PAM excellence in cybersecurity...

UBUNTU-CVE-2024-53137

In the Linux kernel, the following vulnerability has been resolved: ARM: fix cacheflush with PAN It seems that the cacheflush syscall got broken when PAN for LPAE was implemented. User access was not enabled around the cache maintenance instructions, causing them to fault...

CVE-2024-45757

An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10. SQL injection can occur in the user-settings form. Exploitation is only accessible to authenticated users with high-privileged access...

CVE-2024-45757

An issue was discovered in Centreon centreon-bam 24.04, 23.10, 23.04, and 22.10. SQL injection can occur in the user-settings form. Exploitation is only accessible to authenticated users with high-privileged access...

CVE-2024-45757

CVE-2024-45757 affects Centreon centreon-bam versions 22.10–24.04. The issue is a SQL injection in the user-settings form , with exploitation limited to authenticated users holding high privileges . The root cause is untrusted input handling in the user-settings workflow, enabling injected SQL st...

PT-2024-31753 · Centreon · Centreon Bam

Name of the Vulnerable Software and Affected Versions: Centreon centreon-bam versions 22.10 through 24.04 Description: A problem was discovered in the user-settings form of Centreon centreon-bam, where SQL injection can occur. The exploitation of this issue is only accessible to authenticated use...

UBUNTU-CVE-2024-36464

When exporting media types, the password is exported in the YAML in plain text. This appears to be a best practices type issue and may have no actual impact. The user would need to have permissions to access the media types and therefore would be expected to have access to these passwords...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-45755

An issue was discovered in Centreon centreon-dsm-server 24.10.x before 24.10.0, 24.04.x before 24.04.3, 23.10.x before 23.10.1, 23.04.x before 23.04.3, and 22.10.x before 22.10.2. SQL injection can occur in the form to configure Centreon DSM slots. Exploitation is only accessible to authenticated...

CVE-2024-45756

Centreon centreon-open-tickets is affected by a SQL injection in the form to create a ticket. Exploitation requires authenticated access with high privileges. Affected versions include 22.10.x–22.10.1, 23.04.x–23.04.2, 23.10.x–23.10.0, 24.04.x–24.04.1, and 24.10.x–24.09.x. Remediations per PT-202...

CVE-2024-45755

Centreon DSM-server (centreon-dsm-server) suffers a SQL injection vulnerability in the form used to configure DSM slots. Affected versions include 22.10.x up to 22.10.0, 23.04.x up to 23.04.3, 23.10.x up to 23.10.1, 24.04.x up to 24.04.3, and 24.10.x up to 24.10.0. The issue is exploitable by aut...

10 Most Impactful PAM Use Cases for Enhancing Organizational Security

Privileged access management PAM plays a pivotal role in building a strong security strategy. PAM empowers you to significantly reduce cybersecurity risks, gain tighter control over privileged access, achieve regulatory compliance, and reduce the burden on your IT team. As an established provider...

CVE-2024-9875

Okta Privileged Access server agent SFTD versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent SFTD to version 1.87.1 or greater...

Okta Privileged Access 输入验证错误漏洞

Okta Privileged Access is a privileged access management solution from Okta USA. An input validation error vulnerability exists in Okta Privileged Access server agent SFTD versions 1.82.0 through 1.84.0, which stems from an elevation of privilege issue when the sudo command packet feature is...

CVE-2024-9875

Okta Privileged Access server agent SFTD versions 1.82.0 to 1.84.0 are affected by a privilege escalation vulnerability when the sudo command bundles feature is enabled. To remediate this vulnerability, upgrade the Okta Privileged Access server agent SFTD to version 1.87.1 or greater...