11186 matches found
CVE-2024-35161
CVE-2024-35161 affects Apache Traffic Server. Versions 8.0.0–8.1.10 and 9.0.0–9.2.4 forward malformed HTTP chunked trailer sections to origin servers, enabling potential request smuggling and, if the origin is vulnerable, cache poisoning. Debian and Tenable advisories confirm multiple vendors iss...
CVE-2024-35161 Apache Traffic Server: Incomplete check for chunked trailer section allows request smuggling
Apache Traffic Server forwards malformed HTTP chunked trailer section to origin servers. This can be utilized for request smuggling and may also lead cache poisoning if the origin servers are vulnerable. This issue affects Apache Traffic Server: from 8.0.0 through 8.1.10, from 9.0.0 through 9.2.4...
U.S. DoJ Indicts North Korean Hacker for Ransomware Attacks on Hospitals
The U.S. Department of Justice DoJ on Thursday unsealed an indictment against a North Korean military intelligence operative for allegedly carrying out ransomware attacks against healthcare facilities in the country and funneling the payments to orchestrate additional intrusions into defense,...
The vulnerability of RUGGEDCOM microprogrammed Ethernet switches’ web servers allows attackers to gain unauthorized access to the hash values and passwords of all system users.
The vulnerability of web servers running microprogrammed Ethernet switches from RUGGEDCOM is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the hash values and passwords of all system users...
HPESBHF04671 rev.2 - Certain HPE ProLiant DL/ML/SY/XL Edgeline and Alletra Servers, Out-of-Bounds Write Vulnerability
Potential Security Impact: Local: Buffer Overflow SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Alletra 4110 - Prior to v2.2005-27-2024 HPE Alletra 4120 - Prior to v2.2005-27-2024 HPE ProLiant DL20 Gen11 - Prior to v1.4803-14-2024 HPE ProLiant DL110 Gen11 - Prior to...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Linux Linux_Kernel
🇮🇱 BringThemHome NeverAgainIsNow 🇮🇱 We demand the...
Apache HTTP Server 2.4.60 - 2.4.61 Information Disclosure Vulnerability - Linux
Apache HTTP Server is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2024-21137
Vulnerability in the MySQL Server product of Oracle MySQL component: Server: Optimizer. Supported versions that are affected are 8.0.35 and prior and 8.2.0 and prior. Easily exploitable vulnerability allows high privileged attacker with network access via multiple protocols to compromise MySQL...
CVE-2022-48827 NFSD: Fix the behavior of READ near OFFSET_MAX
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d "NFS: Always provide aligned buffers to the RPC read layers" on the client, a read of 0xfff is aligned up to server rsize of 0x1000. As a...
CVE-2022-48827 NFSD: Fix the behavior of READ near OFFSET_MAX
In the Linux kernel, the following vulnerability has been resolved: NFSD: Fix the behavior of READ near OFFSETMAX Dan Aloni reports: Due to commit 8cfb9015280d "NFS: Always provide aligned buffers to the RPC read layers" on the client, a read of 0xfff is aligned up to server rsize of 0x1000. As a...
Teaming up with IBM to secure critical SAP workloads
Trend Micro partners with IBM to offer advanced threat detection and response for protecting critical infrastructures running on IBM Power servers...
CVE-2024-6345 Remote Code Execution in pypa/setuptools
A vulnerability in the packageindex module of pypa/setuptools versions up to 69.1.1 allows for remote code execution via its download functions. These functions, which are used to download packages from URLs provided by users or retrieved from package index servers, are susceptible to code...
EulerOS 2.0 SP10 : xorg-x11-server (EulerOS-SA-2024-1901)
According to the versions of the xorg-x11-server package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : A heap-based buffer over-read vulnerability was found in the X.org server's ProcXIGetSelectedEvents function. This issue occurs when...
HPESBHF04603 rev.1 - HPE ProLiant DL/ML/XL, Synergy, Edgeline and Alletra Servers Using OpenSSL, Multiple Vulnerabilities
Potential Security Impact: Local: Denial of Service DoS; Remote: Denial of Service DoS SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE ProLiant DL20 Gen11 -Prior to v1.4803-14-2024 HPE ProLiant DL110 Gen11 -Prior to v2.2005-27-2024 HPE ProLiant DL320 Gen11 Server -Prior to...
XenApp Error: Citrix Servers Reported That They are Too Busy to Provide Access to the Selected Resource
On attempting to launch any published application from a XenApp 6.0 server, the server reports that it is too busy to provide access to the selected resource. The application event log contains the following entry: The Citrix servers reported that they are too busy to provide access to the select...
Session Timeout are Not Applied on StoreFront Servers
Session timeout are not applied on the StoreFront servers. When a user tries to log on or launch an application the following error is displayed: Logon has expired. Restarting the Wallet services and upgrading to StoreFront 2.6 did not resolve the issue...
How to Disable C-States and Turbo Mode on Fujitsu Servers
This article describes how to disable C-States and Turbo Mode on Fujitsu Servers. Virtual Machines display memory spikes and intermittent networking issues. Servers might become unresponsive when C-States are enabled, or restart unexpectedly when turbo mode is on. C-States and Turbo are responsib...
Unable to Connect to High Availability Enabled XenSever Pool and All Servers in Pool are in Emergency Mode
This article provides resolution to connectivity issues to the pool in XenCenter. Following are some of the issues that you might experience: Cannot connect to the pool in XenCenter Cannot start or migrate the virtual machines, although the virtual machines are active and running. All the servers...
Critical Exim Mail Server Vulnerability Exposes Millions to Malicious Attachments
A critical security issue has been disclosed in the Exim mail transfer agent that could enable threat actors to deliver malicious attachments to target users' inboxes. The vulnerability, tracked as CVE-2024-39929, has a CVSS score of 9.1 out of 10.0. It has been addressed in version 4.98. "Exim...