CVE-2024-32488

In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there...

CVE-2024-32488: Improper Handling of Insufficient Permissions or Privileges

In Foxit PDF Reader and Editor before 2024.1, Local Privilege Escalation could occur during update checks because weak permissions on the update-service folder allow attackers to place crafted DLL files there...

CVE-2024-32488

Foxit PDF Reader and Editor versions before 2024.1 are susceptible to a Local Privilege Escalation vulnerability. The root cause is weak permissions on the update-service folder, which allows an attacker to place crafted DLL files there during update checks to elevate privileges. No specific expl...

PT-2024-24610 · Foxit · Foxit Pdf Reader/Editor

Name of the Vulnerable Software and Affected Versions: Foxit PDF Reader and Editor versions prior to 2024.1 Description: The issue allows Local Privilege Escalation during update checks due to weak permissions on the update-service folder. This weakness enables attackers to place crafted DLL file...

Exploit for CVE-2024-31771

CVE-2024-31771 TotalAV Arbitrary File Write TotalAV version...

The vulnerability of the Okta Verify multi-factor authentication application update service for Windows operating systems allows a perpetrator to execute arbitrary code.

The vulnerability of the Okta Verify multi-factor authentication application update service for Windows operating systems is related to an uncontrolled element in the search process. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

CVE-2024-0980

The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code...

CVE-2024-0980

The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code...

CVE-2024-0980: Improper Limitation of a Pathname to a Restricted Directory

The Auto-update service for Okta Verify for Windows is vulnerable to two flaws which in combination could be used to execute arbitrary code...

PT-2024-2475 · Okta · Okta Verify For Windows

Name of the Vulnerable Software and Affected Versions: Okta Verify for Windows affected versions not specified Description: The issue is related to the auto-update service of Okta Verify for Windows, which is vulnerable to two flaws that can be combined to execute arbitrary code. This could allow...

CVE-2024-0313

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could...

CVE-2024-0313

A malicious insider exploiting this vulnerability can circumvent existing security controls put in place by the organization. On the contrary, if the victim is legitimately using the temporary bypass to reach out to the Internet for retrieving application and system updates, a remote device could...

CVE-2024-0313

Technical details about CVE-2024-0313 are not present in the provided documents. The connected records do not specify affected products, versions, root cause, or remediation. Monitor for updates.

The vulnerability of MinIO object storage servers, related to deficiencies in access control, allows attackers to escalate their privileges.

The vulnerability of the MinIO object storage server is related to deficiencies in access control based on the UpdateServiceAccountAdminAction policy. Exploiting this vulnerability allows an attacker operating remotely to enhance their privileges...

RLSA-2023:7189 Moderate: fwupd security update

The fwupd packages provide a service that allows session software to update device firmware. Security Fixes: fwupd: world readable password in /etc/fwupd/redfish.conf CVE-2022-3287 For more details about the security issues, including the impact, a CVSS score, acknowledgments, and other related...

CVE-2023-0392

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution...

Design/Logic Flaw

The LDAP Agent Update service with versions prior to 5.18 used an unquoted path, which could allow arbitrary code execution...

CVE-2023-0392

CVE-2023-0392 affects the Okta LDAP Agent Update service, with versions prior to 5.18, due to an unquoted path that could allow arbitrary code execution. The vulnerability is local, requiring high privileges but no user interaction. Impact is described as potential code execution on the host; rem...

PT-2023-16237 · Unknown · Ldap Agent Update Service

Name of the Vulnerable Software and Affected Versions: LDAP Agent Update service versions prior to 5.18 Description: The issue concerns the use of an unquoted path in the LDAP Agent Update service, which could potentially allow arbitrary code execution. Recommendations: For versions prior to 5.18...

CVE-2023-4516

A CWE-306: Missing Authentication for Critical Function vulnerability exists in the IGSS Update Service that could allow a local attacker to change update source, potentially leading to remote code execution when the attacker force an update containing malicious content...