CVE-2024-43514: Double Free

Windows Resilient File System ReFS Elevation of Privilege Vulnerability...

Microsoft Windows Resilient File System 安全漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System ReFS. An attacker could exploit the vulnerability to obtain sensitive information. The following products and versions...

PT-2024-6732

Name of the Vulnerable Software and Affected Versions: Windows Resilient File System ReFS affected versions not specified Description: The issue is related to a buffer overflow in memory, which can allow an attacker to disclose protected information. This can potentially affect the system and all...

CVE-2024-20465

A vulnerability in the access control list ACL programming of Cisco IOS Software running on Cisco Industrial Ethernet 4000, 4010, and 5000 Series Switches could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability is due to the incorrect handling of IPv4 ACLs o...

Cisco IOS 安全漏洞

Cisco IOS is a set of operating systems developed by the U.S.-based Cisco for its network devices. A security vulnerability exists in Cisco IOS that stems from incorrect IPv4 ACL handling on the switching virtual interface when the administrator enables and disables the Resilient Ethernet Protoco...

U.S. Proposes Ban on Connected Vehicles Using Chinese and Russian Tech

The U.S. Department of Commerce DoC said it's proposing a ban on the import or sale of connected vehicles that integrate software and hardware made by foreign adversaries, particularly that of the People's Republic of China PRC and Russia. "The proposed rule focuses on hardware and software...

The vulnerability of the Resilient File System (ReFS) in Windows operating systems, related to the execution of operations beyond the buffer in memory, allows a malicious actor to gain elevated privileges.

The vulnerability of the Resilient File System ReFS in Windows operating systems is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

AlmaLinux 9 : buildah (ALSA-2024:6189)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2024:6189 advisory. golang: crypto/x509: Verify panics on certificates with an unknown public key algorithm CVE-2024-24783 Tenable has extracted the preceding description block direct...

CVE-2024-38135

Windows Resilient File System ReFS Elevation of Privilege Vulnerability...

CVE-2024-38135 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2024-38135 Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2024-38135

CVE-2024-38135 is a Windows Resilient File System (ReFS) Elevation of Privilege vulnerability. CNNVD-202408-1132 notes the flaw affects multiple Windows versions, including Windows 11 (22H2/23H2 and 24H2) on ARM64 and x64, as well as Windows Server 2022/23H2 (Server Core). The connected documents...

Windows Resilient File System (ReFS) Elevation of Privilege Vulnerability

...

CVE-2024-38135: Buffer Over-read

Windows Resilient File System ReFS Elevation of Privilege Vulnerability...

Microsoft Windows Resilient File System 安全漏洞

Microsoft Windows Resilient File System ReFS is a resilient file system from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Resilient File System. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are affected:...

Security Bulletin: IBM Resilient SOAR is vulnerable to command injection (CVE-2024-38319)

Summary It was possible for a privileged user to inject malicious commands that could be executed as another user. This issue has been addressed. Vulnerability Details CVEID:CVE-2024-38319 DESCRIPTION: IBM Security SOAR could allow an authenticated user to execute malicious code loaded from a...

SUSE CVE-2021-37939

It was discovered that Kibana's JIRA connector & IBM Resilient connector could be used to return HTTP response data on internal hosts, which may be intentionally hidden from public view. Using this vulnerability, a malicious user with the ability to create connectors, could utilize these connecto...

SUSE CVE-2021-47363

In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix division by zero while replacing a resilient group The resilient nexthop group torture tests in fibnexthop.sh exposed a possible division by zero while replacing a resilient group 1. The division by zero occurs when...

The Take Command Summit: A Day of Resilience and Preparation

The Take Command Summit is officially in the books. It was a day-long virtual powerhouse of major voices and ultra-relevant topics from across the entire cybersecurity spectrum. We are super proud of the event and grateful for all who joined us for these important discussions. At Rapid7 we are...

CVE-2021-47363

In the Linux kernel, the following vulnerability has been resolved: nexthop: Fix division by zero while replacing a resilient group The resilient nexthop group torture tests in fibnexthop.sh exposed a possible division by zero while replacing a resilient group 1. The division by zero occurs when...