5006 matches found
DEBIAN-CVE-2020-36779
In the Linux kernel, the following vulnerability has been resolved: i2c: stm32f7: fix reference leak when pmruntimegetsync fails The PM reference count is not expected to be incremented on return in these stm32f7i2cxx serious functions. However, pmruntimegetsync will increment the PM reference...
UBUNTU-CVE-2020-36780
In the Linux kernel, the following vulnerability has been resolved: i2c: sprd: fix reference leak when pmruntimegetsync fails The PM reference count is not expected to be incremented on return in sprdi2cmasterxfer and sprdi2cremove. However, pmruntimegetsync will increment the PM reference count...
SUSE CVE-2021-46932
In the Linux kernel, the following vulnerability has been resolved: Input: appletouch - initialize work before device registration Syzbot has reported warning in flushwork. This warning is caused by work-func == NULL, which means missing work initialization. This may happen, since inputdev-close...
SUSE CVE-2023-52433
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an alrea...
SecureMail 24.2 for iOS unable to connect to exchange server
When a user on iOS updates their installed version of SecureMail to 24.2, it no longer syncs with on-prem exchange server. Error in SecureMail logs as follow s: "Secure Mail: The connection to the server timed out. Please try again in a few minutes."...
CVE-2023-52433
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an alrea...
CVE-2023-52433
CVE-2023-52433: Linux kernel netfilter nft_set_rbtree vulnerability. New elements in a single transaction may expire before the transaction ends; skip sync GC during the transaction to avoid the commit path traversing an already released object. Async GC will collect expired elements after the tr...
CVE-2023-52433
In the Linux kernel, the following vulnerability has been resolved: netfilter: nftsetrbtree: skip sync GC for new elements in this transaction New elements in this transaction might expired before such transaction ends. Skip sync GC for such elements otherwise commit path might walk over an alrea...
CVE-2024-22389 BIG-IP iControl REST API Vulnerability
When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
CVE-2024-22389 BIG-IP iControl REST API Vulnerability
When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
K32544615: BIG-IP iControl REST API vulnerability CVE-2024-22389
Security Advisory Description When BIG-IP is deployed in high availability HA and an iControl REST API token is updated, the change does not sync to the peer device. CVE-2024-22389 Impact This vulnerability may allow a high privileged remote authenticated attacker to use deleted or updated API...
PT-2024-19382 · F5 · Big-Ip
The affected software is BIG-IP, specifically when deployed in high availability HA mode. The issue arises when an iControl REST API token is updated, and this change is not synchronized with the peer device. An exploit for this issue is available. The BIG-IP software is affected when deployed in...
CVE-2024-21397
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
CVE-2024-21397
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
Privilege escalation
Microsoft Azure File Sync Elevation of Privilege Vulnerability...
CVE-2024-21397
CVE-2024-21397 — Microsoft Azure File Sync Elevation of Privilege is an Azure File Sync Agent vulnerability where an issue could allow unauthorized users to create files in locations they are not allowed to access. The primary public details describe the impact as an elevation of privileges with ...
CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
CVE-2024-21397 Microsoft Azure File Sync Elevation of Privilege Vulnerability
...
