Zoom Workplace 安全漏洞

Zoom Workplace VDI App for Windows is a client application designed for virtualized desktop environments such as Windows 365 Cloud PCs, supporting virtualization platforms such as Azure Virtual Desktop. An elevation of privilege vulnerability exists in the Zoom Workplace VDI App for Windows, whic...

CVE-2024-32742

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem...

CVE-2024-3037

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

CVE-2024-32742

A vulnerability has been identified in SIMATIC CN 4100 All versions V3.0. The affected device contains an unrestricted USB port. An attacker with local access to the device could potentially misuse the port for booting another operating system and gain complete read/write access to the filesystem...

CVE-2024-32742

Affected product: Siemens SIMATIC CN 4100 (all versions

CVE-2024-3037 Arbitrary File Deletion in PaperCut NG/MF Web Print

An arbitrary file deletion vulnerability exists in PaperCut NG/MF, specifically affecting Windows servers with Web Print enabled. To exploit this vulnerability, an attacker must first obtain local login access to the Windows Server hosting PaperCut NG/MF and be capable of executing low-privilege...

CVE-2024-3037

CVE-2024-3037 (and related CVE-2024-8404) describe an arbitrary file deletion vulnerability in PaperCut NG/MF running on Windows with Web Print enabled. An attacker must have local login access and be able to execute low-privilege code on the PaperCut host, exploiting a web-print-hot-folder/Web P...

PT-2024-10059 · Intel · Intel Chipset Device

Name of the Vulnerable Software and Affected Versions: IntelR Chipset Device Software versions prior to 10.1.19444.8378 Description: The issue is related to an uncontrolled search path in the Intel Chipset INF Utility, which may allow an authenticated user to potentially enable escalation of...

PT-2024-10051 · Intel · Intel Ethernet Controller Administrative Tools

Name of the Vulnerable Software and Affected Versions: IntelR Ethernet Controller Administrative Tools versions prior to 28.3 Description: The issue is related to improper access control in the IntelR Ethernet Controller Administrative Tools software. This may allow an authenticated user to...

CVE-2024-28132

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-28132

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-28132 BIG-IP NEXT CNF vulnerability

Exposure of Sensitive Information vulnerability exists in the GSLB container, which may allow an authenticated attacker with local access to view sensitive information. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...

CVE-2024-28132

CVE-2024-28132 affects BIG-IP Next CNF and is a Sensitive Information disclosure in the GSLB container. An authenticated attacker with administrator privileges may exploit it locally to view sensitive information. Affected versions: 1.2.0–1.2.1 . Root cause: exposure within the GSLB container; fi...

AZL-40396 CVE-2024-4418 affecting package libvirt for versions less than 10.0.0-5

A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop method, the data pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOEventFD callback while the data pointer's...

AZL-40447 CVE-2024-4418 affecting package libvirt for versions less than 7.10.0-10

A race condition leading to a stack use-after-free flaw was found in libvirt. Due to a bad assumption in the virNetClientIOEventLoop method, the data pointer to a stack-allocated virNetClientIOEventData structure ended up being used in the virNetClientIOEventFD callback while the data pointer's...

CVE-2021-35000

OpenBSD Kernel Multicast Routing Uninitialized Memory Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of OpenBSD Kernel. An attacker must first obtain the ability to execute low-privileged code on the targ...

Debian dla-3808 : intel-microcode - security update

The remote Debian 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the dla-3808 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3808-1 [email protected]...

CVE-2023-41830

An improper absolute path traversal vulnerability was reported for the Ready For application allowing a local application access to files without authorization...

CVE-2023-27322

Parallels Desktop Service Improper Initialization Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target host...

hw: intel: Protection mechanism failure for some Intel(R) PROSet/Wireless WiFi

Protection mechanism failure for some IntelR PROSet/Wireless WiFi software may allow a privileged user to enable escalation of privilege via local access...