LF-Edge, Zededa Security Vulnerabilities

Linux kernel vulnerabilities

Releases Ubuntu 22.04 LTS Packages linux-azure - Linux kernel for Microsoft Azure Cloud systems linux-lowlatency - Linux low latency kernel linux-nvidia - Linux kernel for NVIDIA systems Details Daniele Antonioli discovered that the Secure Simple Pairing and Secure Connections pairing in the...

Microsoft Edge Chromium Installed

Microsoft Edge (Chromium-based), a Chromium-based web browser, is installed on the remote...

Linux kernel vulnerabilities

Releases Ubuntu 23.10 Ubuntu 22.04 LTS Packages linux-aws-6.5 - Linux kernel for Amazon Web Services (AWS) systems linux-raspi - Linux kernel for Raspberry Pi systems Details Pratyush Yadav discovered that the Xen network backend implementation in the Linux kernel did not properly handle zero...

CVE-2019-1030 Microsoft Edge based on Edge HTML Information Disclosure Vulnerability

...

Exploit for CVE-2024-30056

Microsoft-Edge-Information-Disclosure CVE-2024-30056...

Rogue Session Attack (Terrapin)

asyncssh-pypi is vulnerable to Rogue Session Attack. The vulnerability is due to malicious negotiation of extensions during the SSH connection setup process. This issue can be exploited by an attacker via injecting malicious extensions during the negotiation process, resulting in a SSH security...

Microsoft Edge Browser Installed (Windows)

Microsoft Edge, the replacement for Internet Explorer, is installed on the remote Windows...

Microsoft Edge (Chromium) < 124.0.2478.109 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.109. It is, therefore, affected by multiple vulnerabilities as referenced in the May 16, 2024 advisory. Microsoft Edge (Chromium-based) Information Disclosure Vulnerability (CVE-2024-30056) Type Confusion...

Microsoft Edge (Chromium) < 124.0.2478.97 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.97. It is, therefore, affected by multiple vulnerabilities as referenced in the May 10, 2024 advisory. Microsoft Edge (Chromium-based) Spoofing Vulnerability (CVE-2024-30055) Use after free in ANGLE in...

CVE-2024-26196

Microsoft Edge for Android (Chromium-based) Information Disclosure...

Microsoft Edge Add-on Enumeration (Windows)

Nessus was able to enumerate Microsoft Edge browser extensions installed on the remote...

CVE-2023-4462

A vulnerability classified as problematic has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX 250,...

CVE-2023-4464

A vulnerability, which was classified as critical, has been found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201,...

CVE-2023-4465

A vulnerability, which was classified as problematic, was found in Poly Trio 8300, Trio 8500, Trio 8800, Trio C60, CCX 350, CCX 400, CCX 500, CCX 505, CCX 600, CCX 700, EDGE E100, EDGE E220, EDGE E300, EDGE E320, EDGE E350, EDGE E400, EDGE E450, EDGE E500, EDGE E550, VVX 101, VVX 150, VVX 201, VVX....

Cisco IOS XE Software SD Access Fabric Edge Node DoS (cisco-sa-ios-xe-sda-edge-dos-qZWuWXWG)

According to its self-reported version, Cisco IOS-XE Software is affected by a vulnerability. A vulnerability in the IPv4 Software-Defined Access (SD-Access) fabric edge node feature of Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause high CPU utilization and...

Microsoft Edge for Android (CVE-2024-26167)

An spoofing vulnerability exists in Microsoft Edge for Android. An unauthenticated, remote attacker can exploit this to trick end users into potentially revealing sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported...

Microsoft Edge (Chromium) < 124.0.2478.51 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.51. It is, therefore, affected by multiple vulnerabilities as referenced in the April 18, 2024 advisory. Microsoft Edge for Android (Chromium-based) Information Disclosure Vulnerability (CVE-2024-29986) ...

VMware SD-WAN Edge and SD-WAN Orchestrator updates address multiple security vulnerabilities.

3a. Unauthenticated Command Injection vulnerability in SD-WAN Edge (CVE-2024-22246) VMware SD-WAN Edge contains an unauthenticated command injection vulnerability potentially leading to remote code execution. VMware has evaluated the severity of this issue to be in the Important severity range...

Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

Microsoft Edge (Chromium) < 124.0.2478.105 (CVE-2024-4761)

The version of Microsoft Edge installed on the remote Windows host is prior to 124.0.2478.105. It is, therefore, affected by a vulnerability as referenced in the May 14, 2024 advisory. Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an ...

CVE-2020-1569 Microsoft Edge Memory Corruption Vulnerability

...

Microsoft Edge (Chromium) < 120.0.2210.160 / 121.0.2277.83 Multiple Vulnerabilities

The version of Microsoft Edge installed on the remote Windows host is prior to 120.0.2210.160 / 121.0.2277.83. It is, therefore, affected by multiple vulnerabilities as referenced in the January 26, 2024 advisory. Insufficient policy enforcement in iOS Security UI in Google Chrome prior to...

Microsoft Edge (Chromium-based) Information Disclosure Vulnerability

...

CVE-2024-29049

Microsoft Edge (Chromium-based) Webview2 Spoofing...

CVE-2024-29981

Microsoft Edge (Chromium-based) Spoofing...

Big-IP Edge Gateway Client for Windows Detection

Big-IP Edge Gateway Client for Windows, a client connectivity package providing SSL, VPN, security and availability services, is installed on the remote Windows...

CVE-2024-30056

Microsoft Edge (Chromium-based) Information Disclosure...

CVE-2022-26905 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2023-38173 Microsoft Edge for Android Spoofing Vulnerability

...

CVE-2023-21794 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2023-28301 Microsoft Edge (Chromium-based) Tampering Vulnerability

...

CVE-2023-36026 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2024-29057 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2021-42308 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2022-41035 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2022-44688 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2023-36727 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2023-21720 Microsoft Edge (Chromium-based) Tampering Vulnerability

...

CVE-2023-29334 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2024-26188 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2024-29981 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2024-36898

In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is requested with debounce, and that results in debouncing in software, and the line is subsequently reconfigured to enable edge detection then the allocation of the kfifo to...

Microsoft Edge for Android Information Disclosure (CVE-2024-26196)

An information disclosure vulnerability exists in Microsoft Edge for Android. An unauthenticated, remote attacker can exploit this to disclose potentially sensitive information. Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version...

CVE-2024-36898

In the Linux kernel, the following vulnerability has been resolved: gpiolib: cdev: fix uninitialised kfifo If a line is requested with debounce, and that results in debouncing in software, and the line is subsequently reconfigured to enable edge detection then the allocation of the kfifo to...

CVE-2021-43220 Microsoft Edge for iOS Spoofing Vulnerability

...

CVE-2022-23258 Microsoft Edge for Android Spoofing Vulnerability

...

CVE-2023-24935 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2024-21336 Microsoft Edge (Chromium-based) Spoofing Vulnerability

...

CVE-2024-21387 Microsoft Edge for Android Spoofing Vulnerability

...

CVE-2024-26167 Microsoft Edge for Android Spoofing Vulnerability

...