884 matches found
CVE-2024-31850
A path traversal vulnerability exists in the Java version of CData Arc 23.4.8839 when running using the embedded Jetty server, which could allow an unauthenticated remote attacker to gain access to sensitive information and perform limited actions...
CData Arc 安全漏洞
CData Arc is a new data connectivity platform from CData Corporation designed to help organizations enable data-driven decision making and innovation. A security vulnerability exists in CData Arc versions prior to 23.4.8839 that stems from the presence of a path traversal vulnerability. An attack...
March 12, 2024—KB5035930 (Monthly Rollup)
None None...
March 12, 2024—KB5035885 (Monthly Rollup)
None None...
PT-2024-2869 · Cdata +1 · Cdata Arc +1
Name of the Vulnerable Software and Affected Versions: CData Arc versions prior to 23.4.8839 Description: A path traversal vulnerability exists in the Java version of CData Arc when running using the embedded Jetty server. This could allow an unauthenticated remote attacker to gain access to...
resources.arcmachines.com Improper Access Control vulnerability OBB-3855478
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
February 13, 2024—KB5034830 (Monthly Rollup)
None None...
November 14, 2023—KB5032247 (Monthly Rollup)
None None...
February 13, 2024—KB5034819 (Monthly Rollup)
None None...
GHSA-C8V3-JHV9-4PPC Use-after-free when setting the locale
Version 3.0.0 introduced an AtomicStr type, that is used to store the current locale. It stores the locale as a raw pointer to an Arc. The locale can be read with AtomicStr::asstr. AtomicStr::asstr does not increment the usage counter of the Arc. If the locale is changed in one thread, another...
RUSTSEC-2024-0007 Use-after-free when setting the locale
Version 3.0.0 introduced an AtomicStr type, that is used to store the current locale. It stores the locale as a raw pointer to an Arc. The locale can be read with AtomicStr::asstr. AtomicStr::asstr does not increment the usage counter of the Arc. If the locale is changed in one thread, another...
Use-after-free when setting the locale
Version 3.0.0 introduced an AtomicStr type, that is used to store the current locale. It stores the locale as a raw pointer to an Arc. The locale can be read with AtomicStr::asstr. AtomicStr::asstr does not increment the usage counter of the Arc. If the locale is changed in one thread, another...
January 9, 2024—KB5034184 (Monthly Rollup)
None None...
January 9, 2024—KB5034171 (Monthly Rollup)
None None...
December 12, 2023—KB5033429 (Monthly Rollup)
None None...
December 12, 2023—KB5033420 (Monthly Rollup)
None None...
CVE-2023-32638
Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-32638
Incorrect default permissions in some Intel Arc RGB Controller software before version 1.06 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-29165
Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
CVE-2023-29165
Unquoted search path or element in some IntelR ArcTM Control software before version 1.73.5335.2 may allow an authenticated user to potentially enable escalation of privilege via local access...