Lucene search
+L

1107 matches found

Vulnrichment
Vulnrichment
added 2024/09/16 12:0 a.m.12 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

6.8AI score0.00555EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/09/16 12:0 a.m.9 views

Nextcloud Desktop Client 安全漏洞

Nextcloud is a suite of open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany.Nextcloud Desktop Client is a desktop client application for Nextcloud. A security vulnerability exists in Nextcloud Desktop Client versions 3.13.1 through...

9.1CVSS6.5AI score0.00555EPSS
SaveExploits0References6
CVE
CVE
added 2024/09/16 12:0 a.m.81 views

CVE-2024-46958

The CVE applies to Nextcloud Desktop Client for Linux, versions 3.13.1–3.13.3, where the synchronization process may cause files being synchronized between server and client to become world-writable or world-readable. The issue is fixed in version 3.13.4. CVSS metrics in the provided documents sh...

9.1CVSS7.1AI score0.00555EPSS
SaveExploits0References5Affected Software1
Cvelist
Cvelist
added 2024/09/16 12:0 a.m.27 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

0.00555EPSS
SaveExploits0References5
OSV
OSV
added 2024/09/16 12:0 a.m.12 views

CVE-2024-46958

In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This is fixed in 3.13.4...

9.1CVSS6.8AI score0.00555EPSS
SaveExploits0References7
CNNVD
CNNVD
added 2024/08/13 12:0 a.m.5 views

Microsoft Windows Clipboard Virtual Channel Extension 安全漏洞

Microsoft Windows Clipboard Virtual Channel Extension is a Microsoft Corporation initiative that enables users to seamlessly transfer data between applications running on different computers via the system clipboard. A security vulnerability exists in Microsoft Windows Clipboard Virtual Channel...

8.8CVSS6.5AI score0.01312EPSS
SaveExploits0References3
NVD
NVD
added 2024/07/08 3:15 p.m.37 views

CVE-2024-25639

Khoj is an application that creates personal AI agents. The Khoj Obsidian, Desktop and Web clients inadequately sanitize the AI model's response and user inputs. This can trigger Cross Site Scripting XSS via Prompt Injection from untrusted documents either indexed by the user on Khoj or read by...

7.5CVSS0.00573EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
added 2024/06/15 2:12 a.m.9 views

SUSE CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

7.8CVSS7.7AI score0.0032EPSS
SaveExploits0References3
NVD
NVD
added 2024/06/14 4:15 p.m.56 views

CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

7.8CVSS0.0032EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2024/06/14 4:15 p.m.24 views

CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

7.8CVSS7.2AI score0.0032EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2024/06/14 3:42 p.m.23 views

CVE-2024-37885 Code injection in Nextcloud Desktop Client for macOS

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

3.8CVSS7.7AI score0.0032EPSS
SaveExploits0References3
CVE
CVE
added 2024/06/14 3:42 p.m.75 views

CVE-2024-37885

CVE-2024-37885 concerns the Nextcloud Desktop Client for macOS. A code injection vulnerability allows loading arbitrary code when the client is launched with the environment variable DYLD_INSERT_LIBRARIES set, as reported for versions prior to 3.12.0. The issue stems from how the macOS client han...

7.8CVSS4.8AI score0.0032EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/06/14 3:42 p.m.59 views

CVE-2024-37885 Code injection in Nextcloud Desktop Client for macOS

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

3.8CVSS0.0032EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2024/06/14 3:42 p.m.75 views

CVE-2024-37885

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

7.8CVSS7.6AI score0.0032EPSS
SaveExploits0
OSV
OSV
added 2024/06/14 3:42 p.m.17 views

CVE-2024-37885 Code injection in Nextcloud Desktop Client for macOS

The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with your computer. A code injection in Nextcloud Desktop Client for macOS allowed to load arbitrary code when starting the client with DYLDINSERTLIBRARIES set in the enviroment. It is recommended that the Nextcloud...

3.8CVSS7.6AI score0.0032EPSS
SaveExploits0References5
Nextcloud
Nextcloud
added 2024/06/14 2:34 p.m.38 views

Code injection in Nextcloud Desktop Client for macOS

None...

7.8CVSS7.5AI score0.0032EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2024/06/14 12:0 a.m.9 views

Nextcloud Security Breach

Nextcloud is an open source, self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany.Nextcloud Desktop Client is a desktop client application for Nextcloud. A security vulnerability exists in Nextcloud Desktop Client versions prior to 3.12.0, which...

7.8CVSS7.3AI score0.0032EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2024/06/13 12:0 a.m.10 views

The vulnerability of the MiCollab Desktop Client client of the collaborative work platform MiCollab, along with the virtual instance of the MiVoice Business Solution Virtual Instance (MiVB SVI), allows a hacker to bypass security restrictions, enhance their privileges, and execute arbitrary code.

The vulnerability of the MiCollab Desktop Client, a platform for collaborative work between MiCollab and the virtual instance of the MiVoice Business Solution Virtual Instance MiVB SVI, is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to circumvent...

7.8CVSS5.8AI score0.00765EPSS
SaveExploits0References5Affected Software2
Positive Technologies
Positive Technologies
added 2024/05/23 12:0 a.m.6 views

PT-2024-4059 · Mitel · Mivoice Business Solution Virtual Instance +1

Name of the Vulnerable Software and Affected Versions: Mitel MiCollab versions 9.7.1.110 and earlier MiVoice Business Solution Virtual Instance MiVB SVI version 1.0.0.25 Description: A vulnerability in the Desktop Client could allow an authenticated attacker to conduct a privilege escalation atta...

6.8CVSS8.1AI score0.00765EPSS
SaveExploits0References9
BDU FSTEC
BDU FSTEC
added 2024/05/02 12:0 a.m.7 views

The vulnerability of the RDP client FreeRDP, related to the swapping of the zero pointer, allows a hacker to trigger a service failure.

The vulnerability of the RDP client FreeRDP is related to the assignment of the zero pointer. Exploiting this vulnerability can allow a malicious actor to cause a service failure remotely...

7.8CVSS6.6AI score0.01224EPSS
SaveExploits0References15Affected Software9
Rows per page
Query Builder