Splashtop Remote Client 安全漏洞

Splashtop Remote Client is a remote access and remote support software from Splashtop USA. A security vulnerability exists in Splashtop Remote Client Business Edition 3.4.8.3 and earlier versions that originates when Splashtop Remote Client creates temporary files in a directory with insecure...

PT-2022-11668 · Splashtop · Splashtop Remote Client

Name of the Vulnerable Software and Affected Versions: Splashtop Remote Client Personal Edition versions 3.4.6.1 and earlier Description: The issue is related to the creation of a temporary file in a directory with insecure permissions. Recommendations: For versions 3.4.6.1 and earlier, update to...

Tibco BusinessConnect Container Edition 权限许可和访问控制问题漏洞

Tibco BusinessConnect Container Edition is a lightweight, sophisticated tool from Tibco, Inc. for business-to-business e-commerce transactions deployed in a unified and consistent manner on a container-based Paas platform. Tibco BusinessConnect Container Edition suffers from a privilege-permissio...

Tibco BusinessConnect Container Edition 权限许可和访问控制问题漏洞

Tibco BusinessConnect Container Edition is a lightweight, sophisticated tool from Tibco, Inc. for business-to-business e-commerce transactions deployed in a unified and consistent manner on a container-based Paas platform. Tibco BusinessConnect Container Edition suffers from a privilege-permissio...

CVE-2021-42713: Exposure of Resource to Wrong Sphere

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-43049: Undefined Security Weakness

The Database component of TIBCO Software Inc.'s TIBCO BusinessConnect Container Edition contains an easily exploitable vulnerability that allows an unauthenticated attacker with network access to obtain the usernames and passwords of users of the affected system. Affected releases are TIBCO...

CVE-2021-42714: Exposure of Resource to Wrong Sphere

Splashtop Remote Client Business Edition through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

Command Execution Vulnerability in Sunflower Personal Edition for Windows at Shanghai Berry Information Technology Co.

Sunflower is a free, all-in-one remote control management tool software that integrates remote control of computer and cell phone, remote desktop connection, remote boot, remote management, and intranet penetration support. Ltd. Sunflower Personal Edition for Windows has a command execution...

CVE-2022-21220

Improper restriction of XML external entity for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2021-39943

An authorization logic error in the External Status Check API in GitLab EE affecting all versions starting from 14.1 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.5 before 14.5.2, allowed a user to update the status of the check via an API call...

Input validation

Improper input validation in a third-party component for IntelR QuartusR Prime Pro Edition before version 21.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21203

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2022-21204

Intel Quartus Prime Pro Edition before 21.3 has an improper permissions issue that can allow an authenticated user to escalate privileges via local access. The Intel advisory also notes a separate path affecting Standard Edition up to 21.1. Remediation: upgrade Pro to 21.3+ (and Standard to 21.1+).

CVE-2021-44454

Intel’s advisory confirms CVE-2021-44454: a vulnerability in a third‑party component used by Intel® Quartus® Prime Pro Edition before 21.3, caused by improper input validation. The issue enables authenticated local escalation of privilege. Affected product: Intel® Quartus® Prime Pro Edition (befo...

CVE-2022-21174

CVE-2022-21174 involves improper access control in a third-party component used by Intel® Quartus® Prime Pro Edition prior to version 21.3, enabling a locally authenticated user to potentially escalate privileges. The vulnerability is documented across multiple sources (NVD, Red Hat, Intel adviso...

Intel Quartus Prime Pro 权限许可和访问控制问题漏洞

Intel Quartus Prime Pro is a set of multi-platform design environments from the U.S. company Intel Intel. The product is primarily used for programming programmable logic devices. Intel Quartus Prime Pro Edition is vulnerable to a privilege licensing and access control issue vulnerability that...

Rocky Linux 8 : java-11-openjdk (RLSA-2022:185)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:185 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are...

Rocky Linux 8 : java-1.8.0-openjdk (RLSA-2022:307)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2022:307 advisory. - Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Serialization. Supported versions that are...

CVE-2022-21203: Improper Preservation of Permissions

Improper permissions in the SafeNet Sentinel driver for IntelR QuartusR Prime Standard Edition before version 21.1 may allow an authenticated user to potentially enable escalation of privilege via local access...

Rocky Linux 8 : java-11-openjdk (RLSA-2021:2781)

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2021:2781 advisory. - Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE component: Networking. Supported versions that are affected...