Lucene search
+L

211 matches found

Github Security Blog
Github Security Blog
added 2024/08/22 9:30 a.m.23 views

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users...

5.3CVSS7.2AI score0.00595EPSS
SaveExploits1References3Affected Software1
NVD
NVD
added 2024/08/22 8:15 a.m.16 views

CVE-2024-8072

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users...

5.3CVSS0.00595EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2024/08/22 7:52 a.m.18 views

CVE-2024-8072 Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users

Mage AI allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users...

5.3CVSS7.3AI score0.00595EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/08/22 12:00 a.m.20 views

PT-2024-38786

Name of the Vulnerable Software and Affected Versions: Mage AI affected versions not specified Description: The issue allows remote unauthenticated attackers to leak the terminal server command history of arbitrary users. Recommendations: At the moment, there is no information about a newer versi...

6.9CVSS6.1AI score0.00595EPSS
SaveExploits1References12
NVD
NVD
added 2024/08/02 11:16 a.m.32 views

CVE-2024-38876

A vulnerability has been identified in Omnivise T3000 Application Server R9.2 All versions, Omnivise T3000 Domain Controller R9.2 All versions, Omnivise T3000 Product Data Management PDM R9.2 All versions, Omnivise T3000 R8.2 SP3 All versions, Omnivise T3000 R8.2 SP4 All versions, Omnivise T3000...

8.5CVSS0.00243EPSS
SaveExploits3References2
BDU FSTEC
BDU FSTEC
added 2024/08/02 12:00 a.m.15 views

The vulnerabilities of the components such as Omnivise T3000 Application Server, Omnivise T3000 Domain Controller, Omnivise T3000 Network Intrusion Detection System (NIDS), Omnivise T3000 Product Data Management (PDM), Omnivise T3000 Security Server, Omnivise T3000 Terminal Server, Omnivise T3000 Thin Client, and Omnivise T3000 Whitelisting Server, along with their software-defined hardware platforms for process management and monitoring in the Siemens Omnivise T3000 system, allow attackers to disclose protected information and enhance their privileges.

The vulnerabilities of the Omnivise T3000 Application Server, Omnivise T3000 Domain Controller, Omnivise T3000 Network Intrusion Detection System NIDS, Omnivise T3000 Product Data Management PDM, Omnivise T3000 Security Server, Omnivise T3000 Terminal Server, Omnivise T3000 Thin Client, and...

8.2CVSS7.7AI score0.00187EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2024/06/21 12:00 a.m.6 views

PT-2024-5380 · Omnivise · Omnivise T3000 Terminal Server +5

Name of the Vulnerable Software and Affected Versions: Omnivise T3000 Application Server R9.2 All versions Omnivise T3000 Domain Controller R9.2 All versions Omnivise T3000 Product Data Management PDM R9.2 All versions Omnivise T3000 R8.2 SP3 All versions Omnivise T3000 R8.2 SP4 All versions...

8.5CVSS7.5AI score0.00243EPSS
SaveExploits3References9
BDU FSTEC
BDU FSTEC
added 2024/04/25 12:00 a.m.8 views

Vulnerability of anti-virus protection tools such as Check Point ZoneAlarm, Extreme Security, and NextGen, as well as software identification tools like Check Point Identity Agent for Windows and Identity Agent for Windows Terminal Server. This vulnerability arises from improper granting of permissions to critical resources, allowing attackers to increase their privileges.

The vulnerability of the Check Point antivirus protection products, such as ZoneAlarm Extreme Security and NextGen, as well as the Check Point Identity Agent for Windows and Identity Agent for Windows Terminal Server, is related to the improper assignment of permissions to critical resources...

7.8CVSS5.5AI score0.00153EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2024/04/18 5:35 p.m.28 views

CVE-2024-24910 LocalprivilegeescalationinCheckPointZoneAlarmExtremeSecurityNextGen,IdentityAgentforWindows,andIdentityAgentforWindowsTerminalServerviacraftedDLLfile

A local attacker can erscalate privileges on affected Check Point ZoneAlarm ExtremeSecurity NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. To exploit this vulnerability, an attacker must first obtain the ability to execute local privileged code on the target...

7.1AI score0.00153EPSS
SaveExploits0References1
CVE
CVE
added 2024/04/18 5:35 p.m.94 views

CVE-2024-24910

CVE-2024-24910 describes a local privilege escalation in Check Point ZoneAlarm Extreme Security NextGen, Identity Agent for Windows, and Identity Agent for Windows Terminal Server. Affected components arise from incorrect permission handling for a critical resource, enabling a local attacker who ...

7.3CVSS6.7AI score0.00153EPSS
SaveExploits0References1Affected Software2
Positive Technologies
Positive Technologies
added 2024/02/01 12:00 a.m.11 views

PT-2024-3070

Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm Extreme Security NextGen affected versions not specified Check Point Identity Agent for Windows affected versions not specified Check Point Identity Agent for Windows Terminal Server affected versions not specified...

7.3CVSS6.7AI score0.00153EPSS
SaveExploits0References8
BDU FSTEC
BDU FSTEC
added 2023/11/08 12:00 a.m.12 views

The vulnerability of the NPort 6000 terminal server’s microprogramming software arises from the improper implementation of authentication algorithms, allowing attackers to escalate their privileges.

The vulnerability of the NPort 6000 terminal server’s microprogramming software is related to the improper implementation of the authentication algorithm. Exploiting this vulnerability allows a malicious actor to increase their privileges remotely...

10CVSS7.1AI score0.00313EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2023/06/07 12:00 a.m.22 views

The vulnerability of the CN2600 terminal server’s microprogramming software, related to the use of cryptographic algorithms containing defects, allows a hacker to compromise the connection and gain access to protected information.

The vulnerability of the microprogramming software of the terminal server CN2600 is related to the use of cryptographic algorithms that contain vulnerabilities. Exploiting this vulnerability can allow a malicious actor to compromise the connection and gain access to protected information...

9.4CVSS5.5AI score
SaveExploits0References1Affected Software1
SUSE CVE
SUSE CVE
added 2023/02/15 6:08 a.m.6 views

SUSE CVE-2008-1293

ldm in Linux Terminal Server Project LTSP 0.99 and 2 passes the -ac option to the X server on each LTSP client, which allows remote attackers to connect to this server via TCP port 6006 aka display :6...

4.8CVSS7.1AI score0.0118EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:54 a.m.9 views

SUSE CVE-2011-0901

Multiple stack-based buffer overflows in the tsclaunchremote function src/support.c in Terminal Server Client tsclient 0.150, and possibly other versions, allow user-assisted remote attackers to execute arbitrary code via a .RDP file with a long 1 username, 2 password, or 3 domain argument. NOTE:...

6.8CVSS7.9AI score0.04523EPSS
SaveExploits1References3
SUSE CVE
SUSE CVE
added 2023/02/15 5:54 a.m.8 views

SUSE CVE-2011-0900

Stack-based buffer overflow in the tsclaunchremote function src/support.c in Terminal Server Client tsclient 0.150, and possibly other versions, allows user-assisted remote attackers to execute arbitrary code via a .RDP file with a long hostname argument...

6.8CVSS8.1AI score0.05207EPSS
SaveExploits2References3
CNNVD
CNNVD
added 2022/11/28 12:00 a.m.20 views

Micro-Star International MSI Center 数据伪造问题漏洞

Micro-Star International MSI Center is a monitoring and management platform from Micro-Star International China. All your favorite features can be found on the Feature Set page, such as Gaming Mode or Smart Priority. A security vulnerability exists in Micro-Star International MSI Center version...

8.8CVSS7.8AI score0.00398EPSS
SaveExploits1References3
Microsoft KB
Microsoft KB
added 2022/02/15 12:00 a.m.14 views

February 15, 2022—KB5010421 (OS Build 20348.558) Preview

None None...

6.1AI score
SaveExploits0
OSV
OSV
added 2021/03/11 4:15 p.m.4 views

CVE-2021-26887

An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...

7.8CVSS7AI score0.01056EPSS
SaveExploits0References1
NVD
NVD
added 2021/03/11 4:15 p.m.26 views

CVE-2021-26887

An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal server, an attacker who successfully exploited the vulnerability would be able to begin redirecting anothe...

7.8CVSS0.01056EPSS
SaveExploits0References2
Rows per page
Query Builder