7075 matches found
CVE-2024-43089
In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration
Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution RCE The issue, per findings from watchTowr, is rooted in the Session Recording component that allows system administrators...
November 12, 2024—KB5046613 (OS Builds 19044.5131 and 19045.5131) - EXPIRED
None None...
Microsoft Graphics Component 资源管理错误漏洞
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...
PT-2024-8155 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to a buffer overfl...
Checking excessively long DSA keys or parameters may be very slow
OpenSSL contains an unbounded computation flaw when performing checks on excessively large DSA keys or parameters, which could lead to a denial-of-service DoS attack. The OpenSSL pkey, pkeyparam command line apps, and FIPS providers are affected...
PT-2024-8515
Name of the Vulnerable Software and Affected Versions: Citrix Virtual Apps and Desktops CVAD versions 1912 LTSR, 2203, 2402, and 2407 Description: This issue involves improper privilege management within the Session Recording component of Citrix Virtual Apps and Desktops CVAD. Exploitation allows...
PT-2024-8550 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified 365 Apps for Enterprise affected versions not specified Description: The issue is related to a memory usage problem after memory has been freed,...
Citrix Systems Virtual Apps and Desktops 安全漏洞
Citrix Systems Virtual Apps and Desktops is virtual software from Citrix Systems, Inc. that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Systems Virtual Apps and Desktops that stems from the ability to access privileges and...
Citrix Systems Virtual Apps and Desktops 安全漏洞
Citrix Systems Virtual Apps and Desktops is a virtualization software from Citrix Systems, Inc. that provides virtual desktops and virtual applications for any operating system. A security vulnerability exists in Citrix Systems Virtual Apps and Desktops that stems from the ability to access...
KLA77110 PE vulnerability in Microsoft Apps
An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49051 CVE list CVE-2024-49051 high Solution Install necessary updates from the KB section, that are listed in your Windows Update...
Citrix-Virtual-Apps-XEN-Exploit
CVE-2024-xxxx Citrix Virtual Apps and Desktops XEN Unauthen...
CVE-2024-11026
CVE-2024-11026 affects Intelligent Apps Freenow App 12.10.0 on Android. The issue resides in the Keystore Handler’s SSL.java (ch/qos/logback/core/net/ssl/SSL.java), where the argument DEFAULT_KEYSTORE_PASSWORD is manipulated with the input value “changeit,” resulting in a hard-coded password. Thi...
CVE-2024-50811
hopetree izone lts c011b48 contains a server-side request forgery SSRF vulnerability in the active push function as \apps\tool\apis\bdpush.py does not securely filter user input through pushurls and geturls...
CVE-2024-8810 Privilege Management vulnerability was identified in GitHub Enterprise Server that allowed GitHub Apps to grant themselves write access
A GitHub App installed in organizations could upgrade some permissions from read to write access without approval from an organization administrator. An attacker would require an account with administrator access to install a malicious GitHub App. This vulnerability affected all versions of GitHu...
New Winos4.0 Malware Targeting Windows via Fake Gaming Apps
A sophisticated malware called Winos4.0 is being disguised as harmless gaming applications to infiltrate Windows-based systems. Learn about…...
CVE-2024-34677
Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...
CVE-2024-34677
Exposure of sensitive information in System UI prior to SMR Nov-2024 Release 1 allow local attackers to make malicious apps appear as legitimate...
CVE-2024-34677
CVE-2024-34677 relates to a vulnerability in Samsung Mobile’s System UI prior to the SMR Nov-2024 Release 1. The issue enables local attackers to exploit a flaw in System UI to disclose sensitive information and to cause malicious apps to appear legitimate. The publicly documented affected compon...