1107 matches found
CVE-2021-32728
The CVE describes a vulnerability in Nextcloud Desktop Client prior to 3.3.0 where the client does not verify that a private key matches the previously downloaded public certificate when obtaining keys via the API. If a server serves a malicious public key, user data could be encrypted for that k...
CVE-2021-32728 End-to-end encryption device setup did not verify public key
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption feature download the public and private key via an API endpoint. In versions prior to 3.3.0, the Nextcloud Desktop client fails to check if a privat...
CVE-2021-32728
The Nextcloud Desktop Client is a tool to synchronize files from Nextcloud Server with a computer. Clients using the Nextcloud end-to-end encryption feature download the public and private key via an API endpoint. In versions prior to 3.3.0, the Nextcloud Desktop client fails to check if a privat...
Untrusted Search Path in Nextcloud Desktop Client
None...
Nextcloud Desktop Client 信任管理问题漏洞
Nextcloud is an open source suite of self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany.Nextcloud Desktop Client is a desktop client application for Nextcloud. A security vulnerability exists in versions of the Nextcloud Desktop Client prior to...
PT-2021-6528 · Nextcloud +1 · Nextcloud Desktop Client +1
Name of the Vulnerable Software and Affected Versions: Nextcloud Desktop Client versions prior to 3.3.0 Description: The issue is related to the end-to-end encryption feature of the Nextcloud Desktop Client, where the client fails to check if a private key belongs to a previously downloaded publi...
The vulnerability of the Remote Desktop Client for Microsoft Windows operating systems relates to operations that go beyond the buffer limits in memory, allowing an attacker to execute arbitrary code.
The vulnerability of the Remote Desktop Client for Microsoft Windows operating systems relates to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2021-34535
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2021-34535
Remote Desktop Client Remote Code Execution Vulnerability...
Remote code execution
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2021-34535
Remote Desktop Client Remote Code Execution Vulnerability...
CVE-2021-34535 Remote Desktop Client Remote Code Execution Vulnerability
...
CVE-2021-34535
CVE-2021-34535 is a Remote Desktop Client remote code execution vulnerability in Windows. According to the connected sources, it affects the Windows Remote Desktop Client component and is rated High (CVSS v3.1 base 8.8). Exploitation was addressed in Microsoft’s August 2021 Patch Tuesday updates;...
Remote Desktop Client Detection (Windows SMB Login)
Detects the installed version of Remote Desktop Client. The script logs in via smb, searches for Remote Desktop Client in the registry and gets the version from SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...
Remote Desktop Client RCE Vulnerability - Windows
Remote Desktop Client is prone to RCE vulnerability. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Microsoft Remote Desktop Client Remote Code Execution (CVE-2021-34535)
A remote code execution vulnerability exists in Microsoft Windows. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...
Security Bulletin: openSSL and Apache Hadoop vulnerability impacting Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop Client, Aspera On Demand (CVE-2020-1971, CVE-2020-9492)
Summary The openSSL vulnerability CVE-2020-1971 and Apache Hadoop vulnerability CVE-2020-9492 impacts Aspera High-Speed Transfer Server, Aspera High-Speed Transfer Endpoint, Aspera Desktop Client, Aspera High-Speed Transfer Server On Demand and Aspera High-Speed Transfer Endpoint On Demand 4.1.1...
MuWire Information Disclosure Vulnerability
MuWire is an open source file publishing and networking tool that uses 12P technology to protect the identity of its users.A security vulnerability in the desktop client prior to MuWire version 0.8.8 could be exploited by an attacker to send a message with a subject line containing a URL tagged...
Nextcloud Trust Management Issues Vulnerability (CNVD-2021-42394)
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. A security vulnerability exists in Nextcloud, which stems from the vulnerability of the Nextcloud desktop client prior to 3.3.1 to incorrect certificate...