Lucene search
+L

302 matches found

Cvelist
Cvelist
•added 2024/03/26 12:47 p.m.•33 views

CVE-2024-1933 Improper symlink resolution in TeamViewer Remote client for macOS

Insecure UNIX Symbolic Link Symlink Following in TeamViewer Remote Client prior Version 15.52 for macOS allows an attacker with unprivileged access, to potentially elevate privileges or conduct a denial-of-service-attack by overwriting the symlink...

7.1CVSS7AI score0.00209EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/03/26 12:00 a.m.•3 views

CVE-2024-1933: UNIX Symbolic Link (Symlink) Following

Insecure UNIX Symbolic Link Symlink Following in TeamViewer Remote Client prior Version 15.52 for macOS allows an attacker with unprivileged access, to potentially elevate privileges or conduct a denial-of-service-attack by overwriting the symlink...

7.1CVSS6AI score0.00209EPSS
SaveExploits0References2
OSV
OSV
•added 2024/03/06 10:57 a.m.•30 views

BIT-MYSQL-CLIENT-2023-5157 Mariadb: node crashes with transport endpoint is not connected mysqld got signal 6

A vulnerability was found in MariaDB. An OpenVAS port scan on ports 3306 and 4567 allows a malicious remote client to cause a denial of service...

7.5CVSS7.1AI score0.02237EPSS
SaveExploits0References10
RedHat Linux
RedHat Linux
•added 2024/03/04 9:16 a.m.•12 views

squid: denial of service in HTTP header parser

A flaw was found in Squid. This issue may allow a remote client or remote server to trigger a denial of service when sending oversized headers in HTTP messages...

7.5CVSS5.8AI score0.88094EPSS
SaveExploits0References6
OSV
OSV
•added 2024/02/27 2:15 p.m.•16 views

CVE-2024-0819

Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by changing the personal password setting and establishing a remote connection to a logged-in admin account...

7.8CVSS5.8AI score0.00196EPSS
SaveExploits0References1
NVD
NVD
•added 2024/02/27 2:15 p.m.•46 views

CVE-2024-0819

Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by changing the personal password setting and establishing a remote connection to a logged-in admin account...

7.8CVSS7.3AI score0.00196EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/02/27 2:07 p.m.•19 views

CVE-2024-0819 Incomplete protection of personal password settings

Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by changing the personal password setting and establishing a remote connection to a logged-in admin account...

7.3CVSS7.2AI score0.00196EPSS
SaveExploits0References1
CVE
CVE
•added 2024/02/27 2:07 p.m.•163 views

CVE-2024-0819

CVE-2024-0819 affects TeamViewer Remote Client versions prior to 15.51.5 across Windows, Linux, and macOS. The root cause is improper initialization of default settings, which enables a low-privileged user to escalate privileges by changing the personal password setting and then establishing a re...

7.8CVSS7.3AI score0.00196EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
•added 2024/02/27 12:00 a.m.•20 views

TeamViewer Remote Client Security Vulnerability

Teamviewer is a suite of software for remote control, desktop sharing, and file transfer from Teamviewer, a German company. A security vulnerability exists in TeamViewer Remote Client versions prior to 15.51.5, which stems from improper initialization of the default settings and allows a...

7.8CVSS6.9AI score0.00196EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2024/02/27 12:00 a.m.•25 views

PT-2024-1879 · Teamviewer · Teamviewer Remote Client

Name of the Vulnerable Software and Affected Versions: TeamViewer Remote Client versions prior to 15.51.5 for Windows, Linux, and macOS Description: The issue is related to improper initialization of default settings, allowing a low-privileged user to elevate privileges by changing the personal...

7.8CVSS7.2AI score0.00196EPSS
SaveExploits0References14
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/02/27 12:00 a.m.•1 views

CVE-2024-0819: Improper Privilege Management

Improper initialization of default settings in TeamViewer Remote Client prior version 15.51.5 for Windows, Linux and macOS, allow a low privileged user to elevate privileges by changing the personal password setting and establishing a remote connection to a logged-in admin account...

7.8CVSS5.9AI score0.00196EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2024/02/14 8:55 p.m.•28 views

CVE-2024-25617 Denial of Service in HTTP Header parser in squid proxy

Squid is an open source caching proxy for the Web supporting HTTP, HTTPS, FTP, and more. Due to a Collapse of Data into Unsafe Value bug ,Squid may be vulnerable to a Denial of Service attack against HTTP header parsing. This problem allows a remote client or a remote server to perform Denial of...

5.3CVSS6.8AI score0.88094EPSS
SaveExploits0References3
OSV
OSV
•added 2024/02/09 1:34 a.m.•20 views

MGASA-2024-0031 Updated gnutls packages fix security vulnerabilities

The updated packages fix security vulnerabilities: A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated,...

7.5CVSS6.7AI score0.01614EPSS
SaveExploits2References3
Vulnrichment
Vulnrichment
•added 2024/01/16 2:01 p.m.•9 views

CVE-2024-0567 Gnutls: rejects certificate chain with distributed trust

A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of...

7.5CVSS7.4AI score0.0142EPSS
SaveExploits1References8
Debian CVE
Debian CVE
•added 2024/01/16 2:01 p.m.•54 views

CVE-2024-0567

A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of...

7.5CVSS6.5AI score0.0142EPSS
SaveExploits1
AlpineLinux
AlpineLinux
•added 2024/01/16 2:01 p.m.•45 views

CVE-2024-0567

A vulnerability was found in GnuTLS, where a cockpit which uses gnuTLS rejects a certificate chain with distributed trust. This issue occurs when validating a certificate chain with cockpit-certificate-ensure. This flaw allows an unauthenticated, remote client or attacker to initiate a denial of...

7.5CVSS7AI score0.0142EPSS
SaveExploits1
Prion
Prion
•added 2023/12/14 6:15 p.m.•60 views

Design/Logic Flaw

Squid is a caching proxy for the Web. Due to an Uncontrolled Recursion bug in versions 2.6 through 2.7.STABLE9, versions 3.1 through 5.9, and versions 6.0.1 through 6.5, Squid may be vulnerable to a Denial of Service attack against HTTP Request parsing. This problem allows a remote client to...

5CVSS6.9AI score0.57627EPSS
SaveExploits0References7Affected Software1
Tenable Nessus
Tenable Nessus
•added 2023/11/08 12:00 a.m.•42 views

RHEL 8 : mariadb:10.5 (RHSA-2023:6821)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:6821 advisory. MariaDB is a multi-user, multi-threaded SQL database server that is binary compatible with MySQL. Security Fixes: mariadb: node crashes with Transpor...

7.5CVSS8.1AI score0.02237EPSS
SaveExploits0References4
OSV
OSV
•added 2023/11/03 11:06 a.m.•8 views

OESA-2023-1785 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib...

6.5CVSS6.6AI score0.01891EPSS
SaveExploits0References2
OSV
OSV
•added 2023/11/03 11:06 a.m.•11 views

OESA-2023-1786 qemu security update

QEMU is a FAST! processor emulator using dynamic translation to achieve good emulation speed. Security Fixes: A flaw was found in the QEMU built-in VNC server while processing ClientCutText messages. A wrong exit condition may lead to an infinite loop when inflating an attacker controlled zlib...

6.5CVSS6.6AI score0.01891EPSS
SaveExploits0References2
Rows per page
Query Builder