CVE-2022-0013 Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than...

CVE-2022-0013

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. This issue impacts: Cortex XDR agent 5.0 versions earlier than...

Cortex XDR Agent: File Information Exposure Vulnerability When Generating Support File

A file information exposure vulnerability exists in the Palo Alto Networks Cortex XDR agent that enables a local attacker to read the contents of arbitrary files on the system with elevated privileges when generating a support file. Work around: There are no known workarounds for this issue...

Palo Alto Networks Cortex XDR 信息泄露漏洞

Palo Alto Networks Cortex XDR is a security operations platform for remote endpoint-based detection from Palo Alto Networks Malaysia. A security vulnerability exists in the Palo Alto Networks Cortex XDR agent that can be exploited by an attacker to read the contents of any file on the system with...

MCPP 2.7.2 has a heap-based buffer overflow in the do_msg() function in support.c.

...

CVE-2020-13856

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes...

CVE-2020-13856

An issue was discovered on Mofi Network MOFI4500-4GXeLTE 4.0.8-std devices. Authentication is not required to download the support file that contains sensitive information such as cleartext credentials and password hashes...

ALPINE-CVE-2019-14274

MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c...

AZL-34973 CVE-2019-14274 affecting package mcpp for versions less than 2.7.2-28

MCPP 2.7.2 has a heap-based buffer overflow in the domsg function in support.c...

PT-2019-13577 · Mcpp +1 · Mcpp +1

Name of the Vulnerable Software and Affected Versions: MCPP version 2.7.2 Description: The issue is a heap-based buffer overflow in the do msg function located in support.c. This overflow can potentially lead to arbitrary code execution, allowing an attacker to execute malicious code on the...

MCPP Heap Buffer Overflow Vulnerability

MCPP is an open source C/C ++ preprocessor. A buffer overflow vulnerability exists in the 'domsg' function of the support.c file in MCPP version 2.7.2. The vulnerability stems from a networked system or product performing operations in memory without properly validating data boundaries, resulting...

Exempi Null Pointer Reference Vulnerability

Exempi is an open source implementation of XMP based on the Adobe XMP SDK. A security vulnerability exists in Exempi 2.4.4 and earlier versions, which stems from a failure to detect the presence of null values in the bitstream in the XMPFiles/source/FormatSupport/WEBPSupport.cpp file. An attacker...

Retargetable Machine-Code Decompiler: RetDec

RetDec is a retargetable machine-code decompiler based on LLVM . The decompiler is not limited to any particular target architecture, operating system, or executable file format: Supported file formats: ELF, PE, Mach-O, COFF, AR archive, Intel HEX, and raw machine code. Supported architectures 32...

Security Update for the Microsoft ActiveX Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017

Security Update for the Microsoft ActiveX Information Disclosure Vulnerability in Windows Server 2008: May 9, 2017 Summary An information disclosure vulnerability exists in the way that some ActiveX objects are instantiated. An attacker who successfully exploits this vulnerability could gain acce...

Scientific Linux Security Update : kernel on SL5.x i386/x86_64

This update addresses the following security issues : - a memory leak in keyctl handling. A local user could use this flaw to deplete kernel memory, eventually leading to a denial of service. CVE-2009-0031, Important - a buffer overflow in the Linux kernel Partial Reliable Stream Control...