5394 matches found
Microsoft Project 输入验证错误漏洞
Microsoft Project is a suite of project management software from Microsoft USA. The software is used to assist project managers in developing plans, assigning resources to tasks, tracking progress, managing budgets, and analyzing workloads. An input validation error vulnerability exists in...
Microsoft Windows Common Log File System Driver 输入验证错误漏洞
The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. An...
CVE-2023-28806 Signature validation error in DLL allows disabling anti-tampering protection
An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows 4.2.0.190...
JFrog Artifactory 输入验证错误漏洞
JFrog Artifactory is a solution from JFrog for managing and delivering binaries in the software supply chain. An input validation error vulnerability exists in JFrog Artifactory that stems from vulnerability to incorrect input validation, which can lead to cache poisoning...
Siemens Omnivise T3000 输入验证错误漏洞
The Omnivise T3000 is a distributed control system for fossil fuel and large renewable energy power plants. An improper input validation vulnerability exists in the Siemens Omnivise T3000 Application Server due to an affected system exposing an internal application port on a public network...
Changing TCBServiSign 输入验证错误漏洞
Changing TCBServiSign is a cross-platform security control component from Changing, China. An input validation error vulnerability exists in versions prior to Changing TCBServiSign 1.0.24.0318. The vulnerability stems from a specific API that does not properly validate server-side input, which...
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35169)
Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from accepting characters that are not allowed by the HTTP field name and forwarding a...
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35170)
Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from forwarding the tail end of an incorrectly formatted HTTP chunk to the origin server. ...
Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35671)
Apache Traffic Server is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. An input validation error vulnerability exists in Apache Traffic Server, which can be exploited by an attacker to cause a denial of service condition by sending a specially crafted...
CVE-2024-41083 netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfspagemkwrite to check folio-mapping is valid Fix netfspagemkwrite to check that folio-mapping is valid once it has taken the folio lock as filemappagemkwrite does. Without this, generic/247 occasionally oopses with...
CVE-2024-41143
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...
CVE-2024-41143
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...
CVE-2024-41143
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...
CVE-2024-41143
CVE-2024-41143 is a vulnerability in SKYSEA Client View (Windows client) caused by an origin validation error in shared memory/data exchanges. Affected versions are 3.013.00 through 19.210.04e . If exploited by a user who can log in to the PC, an arbitrary process may execute with SYSTEM privileg...
CVE-2024-41143
Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...
Multiple vulnerabilities in SKYSEA Client View
Overview SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 - CVE-2024-41139 Origin validation error in shared memory data exchanges CWE-3...
SKYSEA Client View 安全漏洞
SKYSEA Client View is a software that supports information leakage countermeasures and IT operations management from SKYSEA Japan. A security vulnerability exists in SKYSEA Client View versions 3.013.00 through 19.210.04e, which stems from the presence of an Origin Validation Error vulnerability...
PT-2024-29292 · Unknown · Skysea Client View
Name of the Vulnerable Software and Affected Versions: SKYSEA Client View versions 3.013.00 through 19.210.04e Description: The issue allows an arbitrary process to be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed. This is due to...
JVN#84326763: Multiple vulnerabilities in SKYSEA Client View
SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2024-41139 Origin...
Apache Traffic Server 输入验证错误漏洞
Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from forwarding the tail end of an incorrectly formatted HTTP chunk to the origin server. ...