89 matches found
Linux Distros Unpatched Vulnerability : CVE-2024-46958
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Nextcloud Desktop Client 3.13.1 through 3.13.3 on Linux, synchronized files between the server and client may become world writable or world readable. This i...
Linux Distros Unpatched Vulnerability : CVE-2023-5981
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found that the response times to malformed ciphertexts in RSA-PSK ClientKeyExchange differ from response times of ciphertexts with correct...
CVE-2025-7012 Cato Networks Linux Client Local Privilege Escalation via Symlink
An issue in Cato Networks' CatoClient for Linux, before version 5.5, allows a local attacker to escalate privileges to root by exploiting improper symbolic link handling...
CVE-2021-30357
SSL Network Extender Client for Linux before build 800008302 reveals part of the contents of the configuration file supplied, which allows partially disclosing files to which the user did not have access...
CVE-2020-8199
Improper access control in Citrix ADC Gateway Linux client versions before 1.0.0.137 results in local privilege escalation to root...
CVE-2020-8250
A vulnerability in the Pulse Secure Desktop Client Linux 9.1R9 could allow local attackers to escalate privilege...
Enabling EDT Lost Tolerant Mode using Linux as client.
How to enable EDT Lost Tolerant Mode in the latest VDAs versions when using Linux as client, all requirements needed...
The vulnerability of the `parse_server_interfaces()` function in the `fs/smb/client/smb2ops.c` module allows a hacker to compromise the integrity of protected information or cause service failures for the SMB kernel client of the Linux operating system.
The vulnerability of the parseserverinterfaces function in the fs/smb/client/smb2ops.c module, which is part of the SMB client support in Linux operating systems, involves a numerical port escape or cyclic shift vulnerability. Exploiting this vulnerability could allow an attacker to compromise th...
Applying Modern UI patch for Citrix Storefront LTSR2402 CU2 (to support CWA Linux Clients)
Symptoms or Error When users on Linux login to their Citrix Workspace App for Linux , they see an infinite progress screen or error instead of seeing the list of their apps and desktops. This is applicable only for customers where the admins have 1. Upgraded their StoreFronts to the new Storefron...
CVE-2023-48957
PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...
CVE-2023-48957
PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...
CVE-2023-48957
CVE-2023-48957 concerns the PureVPN Linux client (2.0.2-Productions) where the DNS query handling is flawed, allowing DNS requests to bypass the VPN tunnel and go directly to the ISP/default DNS servers. The root cause is an improper DNS query handling/control flow in the client, per connected ad...
CVE-2023-48957
PureVPN Linux client 2.0.2-Productions fails to properly handle DNS queries, allowing them to bypass the VPN tunnel and be sent directly to the ISP or default DNS servers...
Ivanti Secure Access Client for Linux Elevation of Privilege Vulnerability
Ivanti Secure Access Client for Linux is a solution for enabling secure remote access, supporting SSL VPN connections and allowing users to securely access internal network resources e.g., administrative systems, applications, etc. from off-campus. An elevation of privilege vulnerability exists i...
CVE-2023-46810
A local privilege escalation vulnerability in Ivanti Secure Access Client for Linux before 22.7R1, allows a low privileged user to execute code as root...
CVE-2021-47366
In the Linux kernel, the following vulnerability has been resolved: afs: Fix corruption in reads at fpos 2G-4G from an OpenAFS server AFS-3 has two data fetch RPC variants, FS.FetchData and FS.FetchData64, and Linux's afs client switches between them when talking to a non-YFS server if the read...
PT-2024-4023 · Ivanti · Ivanti Secure Access Client For Linux
Name of the Vulnerable Software and Affected Versions: Ivanti Secure Access Client for Linux versions prior to 22.7R1 Description: A local privilege escalation issue allows a low-privileged user to execute code as root. The vulnerability is related to a buffer overflow in memory, which can be...
CVE-2023-28804 Linux ZCC allows unsigned updates, allowing elevated Code Execution
An Improper Verification of Cryptographic Signature vulnerability in Zscaler Client Connector on Linux allows replacing binaries.This issue affects Linux Client Connector: before 1.4.0.105...
CVE-2023-39208
Improper input validation in Zoom Desktop Client for Linux before version 5.15.10 may allow an unauthenticated user to conduct a denial of service via network access...
PT-2023-5208 · Zoom · Zoom Desktop Client For Linux
Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Linux versions prior to 5.15.10 Description: The issue is related to improper input validation in the Zoom Desktop Client for Linux, which may allow an unauthenticated user to conduct a denial of service via network...