1156 matches found
CVE-2023-34064: Undefined Security Weakness
Workspace ONE Launcher contains a Privilege Escalation Vulnerability. A malicious actor with physical access to Workspace ONE Launcher could utilize the Edge Panel feature to bypass setup to gain access to sensitive information...
VMware Workspace ONE Launcher updates addresses privilege escalation vulnerability. (CVE-2023-34064)
3. Privilege Escalation Vulnerability Workspace ONE Launcher contains a Privilege Escalation Vulnerability. VMware has evaluated the severity of this issue to be in the Moderate severity range with a maximum CVSSv3 base score of 6.3...
Design/Logic Flaw
A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would...
CVE-2023-5870
Summary (CVE-2023-5870) : PostgreSQL vulnerability where the pg_cancel_backend role can signal background workers (including the autovacuum launcher and logical replication launcher). The underlying issue is that signaling is possible for non-core extensions with less-resilient background workers...
SUSE SLES15: kubevirt-container-disk / kubevirt-manifests / kubevirt-tests / etc (SUSE-SU-2023:4693-1)
The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4693-1 advisory. Kubevirt is rebuilt against updated dependencies to fix security issues. Tenable has extracted the preceding description block...
postgresql: Role pg_signal_backend can signal certain superuser processes.
A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would...
CVE-2023-49240
Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-49240
Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...
Design/Logic Flaw
Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-49240
Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...
CVE-2023-49240
CVE-2023-49240 affects the launcher module in Huawei HarmonyOS (launcher component). The vulnerability is described as an unauthorized access issue that could impact service confidentiality. Connected sources document this in several feeds (e.g., Huawei HarmonyOS bulletin, Red Hat advisory, and P...
CVE-2023-49240: URL Redirection to Untrusted Site
Unauthorized access vulnerability in the launcher module. Successful exploitation of this vulnerability may affect service confidentiality...
PT-2023-31127 · Launcher · Launcher
Name of the Vulnerable Software and Affected Versions: Launcher module affected versions not specified Description: The issue concerns unauthorized access in the launcher module, which could impact service confidentiality upon successful exploitation. Recommendations: At the moment, there is no...
Malicious code in port-launcher (npm)
--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 85da8cb996dc48738626c7874d7a4fedfcdbcb3294d0950ee6274abfaa54cc96 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...
ASB-A-295334906
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
postgresql: Role pg_signal_backend can signal certain superuser processes.
A flaw was found in PostgreSQL involving the pgcancelbackend role that signals background workers, including the logical replication launcher, autovacuum workers, and the autovacuum launcher. Successful exploitation requires a non-core extension with a less-resilient background worker and would...
HiddenDesktop - HVNC For Cobalt Strike
Hidden Desktop often referred to as HVNC is a tool that allows operators to interact with a remote desktop session without the user knowing. The VNC protocol is not involved, but the result is a similar experience. This Cobalt Strike BOF implementation was created as an alternative to...
postgresql-server -- Role pg_cancel_backend can signal certain superuser processes
PostgreSQL Project reports: Documentation says the pgcancelbackend role cannot signal "a backend owned by a superuser". On the contrary, it can signal background workers, including the logical replication launcher. It can signal autovacuum workers and the autovacuum launcher. Signaling autovacuum...