Windows WLAN AutoConfig Service Information Disclosure Vulnerability

...

Microsoft Windows WLAN AutoConfig Service buffer error vulnerability

Microsoft Windows WLAN AutoConfig Service is a wireless network card configuration service for Windows Vista or later operating systems from Microsoft Corporation USA. A buffer error vulnerability exists in Microsoft Windows WLAN AutoConfig Service. An attacker could exploit this vulnerability to...

CVE-2025-21257: Out-of-bounds Read

Windows WLAN AutoConfig Service Information Disclosure Vulnerability...

PT-2025-1099

Name of the Vulnerable Software and Affected Versions Windows WLAN AutoConfig affected versions not specified Description The issue is related to a memory reading error beyond the allowed range in the Windows WLAN AutoConfig service, which can lead to the disclosure of protected information. This...

CVE-2024-52508: Exposure of Sensitive Information to an Unauthorized Actor

Nextcloud Mail is the mail app for Nextcloud, a self-hosted productivity platform. When a user is trying to set up a mail account with an email address like [email protected] that does not support auto configuration, and an attacker managed to register autoconfig.tld, the used email details would ...

SUSE CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

DEBIAN-CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

UBUNTU-CVE-2024-50624

ispdbservice.cpp in KDE Kmail before 6.2.0 allows man-in-the-middle attackers to trigger use of an attacker-controlled mail server because cleartext HTTP is used for a URL such as http://autoconfig.example.com or http://example.com/.well-known/autoconfig for retrieving the configuration. This is...

django-autoconfig (>=0.6.0, <=0.7.2), django-cache-manager (>=0.5.0, <=0.5.1) +1 more potentially affected by CVE-2024-45231 via django (1.11.0rc1)

django PYPI version 1.11.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-autoconfig =0.6.0, =0.5.0, =0.5.1 - django-inline-actions 1.1.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

django-autoconfig (0.8.0) potentially affected by CVE-2024-45231 via django (2.1.0rc1)

django PYPI version 2.1.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-autoconfig 0.8.0 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

correctiv-chartbuilder (>=0.0.1, <=0.0.5), django-autoconfig (0.3.3) +1 more potentially affected by CVE-2024-45231 via django (1.8.0rc1)

django PYPI version 1.8.0rc1 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - correctiv-chartbuilder =0.0.1, =1.0.25, =1.0.27 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

django-amazon-price-monitor (>=0.3.0b2, <=0.4.0), django-autoconfig (>=0.3.4, <=0.3.6) potentially affected by CVE-2024-45231 via django (1.9.0rc2)

django PYPI version 1.9.0rc2 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-amazon-price-monitor =0.3.0b2, =0.3.4, =0.3.6 Source cves: CVE-2024-45231 Source advisory: OSV:GHSA-RRQC-C2JX-6JGV...

CVE-2024-38143

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...

CVE-2024-38143

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability...

CVE-2024-38143

CVE-2024-38143 is a Windows WLAN AutoConfig Service elevation of privilege vulnerability. The CVSS 3.1 vector indicates an attacker must have physical access (AV:P) and exploit with high complexity, no user interaction, and local access (PR:N, UI:N). The vulnerability could yield elevated privile...

CVE-2024-38143 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

...

CVE-2024-38143 Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

...

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

...

PT-2024-5703 · Microsoft · Windows Wlan Autoconfig Service +1

Name of the Vulnerable Software and Affected Versions: Windows WLAN AutoConfig Service affected versions not specified Description: An elevation-of-privilege issue allows attackers to affect the system. The issue is related to the lack of authentication for a critical function in the Windows WLAN...