731 matches found
CVE-2023-36659: Buffer Copy without Checking Size of Input
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Long inputs were not properly processed, which allows remote attackers to cause a denial of service loss of communication...
CVE-2023-36657: Improper Privilege Management
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. Built-in features of Windows desktop shortcuts, narrator can be abused for privilege escalation...
CVE-2023-36658: Unquoted Search Path or Element
An issue was discovered in OPSWAT MetaDefender KIOSK 4.6.1.9996. It has an unquoted service path that can be abused locally...
PT-2023-25660 · Microsoft +1 · Windows +1
Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender KIOSK version 4.6.1.9996 Description: An issue was discovered in OPSWAT MetaDefender KIOSK where built-in features of Windows, such as desktop shortcuts and narrator, can be abused for privilege escalation. Recommendations...
PT-2023-25661 · Opswat · Opswat Metadefender Kiosk
Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender KIOSK version 4.6.1.9996 Description: An issue was discovered in OPSWAT MetaDefender KIOSK. It has an unquoted service path that can be abused locally. Recommendations: For OPSWAT MetaDefender KIOSK version 4.6.1.9996,...
PT-2023-25662 · Opswat · Opswat Metadefender Kiosk
Name of the Vulnerable Software and Affected Versions: OPSWAT MetaDefender KIOSK version 4.6.1.9996 Description: An issue was discovered in OPSWAT MetaDefender KIOSK where long inputs were not properly processed, allowing remote attackers to cause a denial of service, resulting in a loss of...
CVE-2023-3786
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
CVE-2023-3786
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
Improper access control
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
CVE-2023-3786 Aures Komet Kiosk Mode access control
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
CVE-2023-3786
CVE-2023-3786 affects Aures Komet up to 20230509, specifically component area related to Kiosk Mode. The root cause described across connected documents is improper access controls, enabling an attack on the physical device. The vulnerability allows an attacker to exploit the control path due to ...
Aures Komet 安全漏洞
Aures Komet is an interactive multifunctional kiosk from Aures. A security vulnerability exists in Aures Komet 20230509 and prior versions that stems from the presence of incorrect access control...
CVE-2023-3786: Improper Access Control
A vulnerability classified as problematic has been found in Aures Komet up to 20230509. This affects an unknown part of the component Kiosk Mode. The manipulation leads to improper access controls. It is possible to launch the attack on the physical device. The exploit has been disclosed to the...
PT-2023-26147 · Aures · Aures Komet
Name of the Vulnerable Software and Affected Versions: Aures Komet up to 20230509 Description: A problematic issue has been found in Aures Komet, affecting the Kiosk Mode component. This leads to improper access controls. The attack can be launched on the physical device. Recommendations: For Aur...
Malicious code in kiosk-util (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71fbb12b0e624a23789e7a1fdd080d82b14f3f3fdaf40a0efe97bb87cdcdff7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
MAL-2023-556 Malicious code in kiosk-util (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 71fbb12b0e624a23789e7a1fdd080d82b14f3f3fdaf40a0efe97bb87cdcdff7d Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
gnome-session bug fix and enhancement update
An update is available for gnome-session. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The gnome-session package manages the GNOME desktop session. It starts ...
42Gears Surelock 代码问题漏洞
42Gears Surelock is an industry-leading tool from 42Gears USA that locks devices into kiosk mode. A security vulnerability exists in 42Gears Surelock version 2.40.0 that stems from the presence of elevation of privilege and local code execution issues...
