CVE-2024-6122

CVE-2024-6122 describes an incorrect installation-directory permission in the shared NI SystemLink Server KeyValueDatabase service that may allow local information disclosure. Affected: NI SystemLink Server versions prior to 2024 Q1 and NI FlexLogger prior to 2023 Q2 (those that installed the sha...

PT-2024-5126 · Unknown · Cpci85 Central Processing/Communication +1

Name of the Vulnerable Software and Affected Versions: CPCI85 Central Processing/Communication versions prior to V5.40 SICORE Base system versions prior to V1.4.0 Description: A vulnerability has been identified that allows a remote authenticated user or an unauthenticated user with physical acce...

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

An improper access control flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow a privileged user to enable escalation of privilege via local access...

hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...

hw: intel: Improper access control for some Intel(R) PROSet/Wireless WiFi

Improper access control for some IntelR PROSet/Wireless WiFi and KillerTM WiFi software may allow a privileged user to enable escalation of privilege via local access...

PT-2024-7786 · Unknown · Mxview One +1

Name of the Vulnerable Software and Affected Versions: MXview One and MXview One Central Manager affected versions not specified Description: The configuration file stores credentials in cleartext, allowing an attacker with local access rights to read or modify the file. This could result in the...

CVE-2024-39827

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-27240

Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-39821 Zoom Workplace App for Windows and Zoom Rooms App for Windows - Race Condition

Race condition in the installer for Zoom Workplace App for Windows and Zoom Rooms App for Windows may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-39820

CVE-2024-39820 affects Zoom Workplace Desktop App for macOS prior to version 6.0.10. The issue is an uncontrolled search path element in the installer, enabling an authenticated local attacker to cause a denial of service via local access. A fixed version is 6.0.10 or later; remediation is to upg...

CVE-2024-39820 Zoom Workplace Desktop App for macOS - Uncontrolled Search Path Element

Uncontrolled search path element in the installer for Zoom Workplace Desktop App for macOS before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-39819 Zoom Workplace Apps and SDK for Windows - Improper Privilege Management

Integrity check in the installer for some Zoom Workplace Apps and SDKs for Windows may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-39819

CVE-2024-39819 covers a privilege-escalation issue in the Windows installer for Zoom Workplace Apps and SDKs. The root cause is an integrity check within the installer that may allow an authenticated user with local access to elevate privileges. Documents consistently describe this as a local, au...

CVE-2024-39827 Zoom Workplace Desktop App for Windows - Improper Input Validation

Improper input validation in the installer for Zoom Workplace Desktop App for Windows before version 6.0.10 may allow an authenticated user to conduct a denial of service via local access...

CVE-2024-39827

Zoom Workplace Desktop App for Windows is affected by CVE-2024-39827 due to improper input validation in the installer prior to version 6.0.10. The issue allows a local authenticated user to cause a denial of service via local access. The vulnerability is documented across multiple sources (NVD/N...

CVE-2024-27240 Zoom Apps for Windows - Improper Input Validation

Improper input validation in the installer for some Zoom Apps for Windows may allow an authenticated user to conduct a privilege escalation via local access...

CVE-2024-27240

CVE-2024-27240 concerns Zoom Apps for Windows where the installer contains improper input validation. The vulnerability affects the Zoom Apps installer component, enabling a local, authenticated user to escalate privileges via local access. The NVD metrics indicate LOCAL attack vector, LOW attack...

Zoom Rooms and Zoom Workplace Security Vulnerabilities

Zoom Rooms and Zoom Workplace are both products of Zoom, Inc.Zoom Rooms is a software-based conferencing system. A system that allows web conferencing on fixed endpoints, similar to traditional video conferencing systems.Zoom Workplace is a desktop application. A security vulnerability exists in...

Zoom Workplace Security Vulnerability

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from an uncontrolled search path element in the desktop application installer that could allow an authenticated user to perform a denial of service via local access...

CVE-2024-39522

An Improper Neutralization of Special Elements vulnerability in Juniper Networks Junos OS Evolved commands allows a local, authenticated attacker with low privileges to escalate their privileges to 'root' leading to a full compromise of the system. The Junos OS Evolved CLI doesn't properly handle...