CVE-2022-4964

A flaw was discovered in pipewire-pulse, where Snap allows microphone access even in the absence of a configured snap interface for audio recording. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria...

SUSE CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

DEBIAN-CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

Authentication flaw

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

CVE-2022-4964 concerns Ubuntu’s pipewire-pulse in snap, which grants microphone access even when the audio-record snap interface is not configured. The vulnerability is evaluated with a Local attacker, Low attack complexity, Low privileges required, and no user interaction, potentially exposing c...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

PT-2024-11902 · Canonical +1 · Pipewire-Pulse +1

Name of the Vulnerable Software and Affected Versions: pipewire-pulse in Ubuntu snap affected versions not specified Description: The issue concerns the pipewire-pulse in Ubuntu snap, which grants microphone access even when the snap interface for audio-record is not set. This could potentially...

UBUNTU-CVE-2022-4964

Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set...

Exploit for Improper Authentication in Ivanti Connect_Secure

🚨 CVE-2023-46805 Scanner Tool 🛠️ A robust tool for detecting...

The vulnerability in the web interface of the Pulse Connect Secure VPN gateway for corporate networks allows for the execution of XSS attacks.

The vulnerability in the web interface of the Pulse Connect Secure VPN gateway for corporate networks exists due to insufficient cleaning of data provided by users, which are transmitted through the URL address used for Citrix ICA. Exploiting this vulnerability allows a malicious actor to carry o...

Exploit for Improper Authentication in Ivanti Connect_Secure

19/01/2024 Update Updated with the latest info bas...

PT-2024-1991 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to an out-of-bounds access in the of pwm single xlate function of the Linux kernel's PWM Pulse Width Modulation driver. This can potentially allow an attacker to...

The vulnerability of the VPN server of the Ivanti Secure Access Client (ISAC) for corporate networks (formerly known as Pulse Secure Desktop Client) on Windows operating systems arises from the use of insecure configurations. This vulnerability allows attackers to gain unauthorized access to protected information, increase their privileges, or cause service interruptions.

The vulnerability of the VPN server of Ivanti Secure Access Client formerly Pulse Secure Desktop Client for Windows operating systems is related to the use of insecure configurations. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, increase...

Security Bulletin: IBM's Pulse App for QRadar is vulnerable to CVE-2021-32822

Summary The product could allow a remote attacker to obtain sensitive information and use this information to launch further attacks against the system. Vulnerability Details CVEID:CVE-2021-32822 DESCRIPTION: Node.js hbs module could allow a remote attacker to obtain sensitive information, caused...

Security Bulletin: QRadar Pulse application add on to IBM QRadar SIEM is vulnerable to using components with known vulnerabilities

Summary The product includes vulnerable components e.g., framework libraries that may be identified and exploited with automated tools. IBM has released a new version which addresses the vulnerabilities. Vulnerability Details CVEID:CVE-2022-25883 DESCRIPTION: Node.js semver package is vulnerable ...

CVE (2023-34298) Ivanti Secure Access Client Local Privilege Escalation

Summary A logged in Windows user can leverage functionality of the Pulse Secure / Ivanti Secure Access Client or Pulse Secure Installer Service to carry out a privilege escalation on the user machine. Mitigation None Currently Related Links https://forums.ivanti.com/s/article/New-Client-Side...