CVE-2024-41726

A path traversal vulnerability exists in SKYSEA Client View (Ver.3.013.00 to Ver.19.210.04e) and SKYMEC IT Manager . This flaw allows a user capable of logging into a Windows PC with the product's client installed to execute an arbitrary executable file . Subsequent analysis indicated that an ini...

CVE-2024-41726

Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product's Windows client is installed...

CVE-2024-41726

Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product's Windows client is installed...

CVE-2024-41143

CVE-2024-41143 is a vulnerability in SKYSEA Client View (Windows client) caused by an origin validation error in shared memory/data exchanges. Affected versions are 3.013.00 through 19.210.04e . If exploited by a user who can log in to the PC, an arbitrary process may execute with SYSTEM privileg...

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

CVE-2024-41139

Incorrect privilege assignment vulnerability exists in SKYSEA Client View Ver.6.010.06 to Ver.19.210.04e. If a user who can log in to the PC where the product's Windows client is installed places a specially crafted DLL file in a specific folder, arbitrary code may be executed with SYSTEM privile...

CVE-2024-41143: Origin Validation Error

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

CVE-2024-41726: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary executable file may be executed by a user who can log in to the PC where the product's Windows client is installed...

CVE-2024-29014

Vulnerability in SonicWall SMA100 NetExtender Windows 32 and 64-bit client 10.2.339 and earlier versions allows an attacker to arbitrary code execution when processing an EPC Client update...

Configuration for Controlled Access to Different VPN Plugin Through NetScaler Gateway for XenMobile Deployments

Requirement 1: Disable VPN Access for the iOS VPN Client If you configure NetScaler Gateway for use with XenMobile, it includes configuration to enable Secure Web and approved Citrix Apps-enabled applications to access the corporate network. The access is enabled for authenticated users by...

CVE-2024-3330

Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code.This requires human interaction fr...

CVE-2024-3330 Spotfire Remote Code Execution Vulnerability

Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code.This requires human interaction fr...

CVE-2024-3330 Spotfire Remote Code Execution Vulnerability

Vulnerability in Spotfire Spotfire Analyst, Spotfire Spotfire Server, Spotfire Spotfire for AWS Marketplace allows In the case of the installed Windows client: Successful execution of this vulnerability will result in an attacker being able to run arbitrary code.This requires human interaction fr...

Zoom Workplace VDI App for Windows Elevation of Privilege Vulnerability

Zoom Workplace VDI App for Windows is a client application designed for virtualized desktop environments such as Windows 365 Cloud PCs, supporting virtualization platforms such as Azure Virtual Desktop. An elevation of privilege vulnerability exists in the Zoom Workplace VDI App for Windows, whic...

.NET 8.0 Update - May 28 2024 (KB5039845)

None None...

CVE-2024-36049: Use of Hard-coded Credentials

Aptos Wisal payroll accounting before 7.1.6 uses hardcoded credentials in the Windows client to fetch the complete list of usernames and passwords from the database server, using an unencrypted connection. This allows attackers in a machine-in-the-middle position read and write access to personal...

PT-2024-26862 · Aptos +1 · Aptos Wisal Payroll Accounting +1

Name of the Vulnerable Software and Affected Versions: Aptos Wisal payroll accounting versions prior to 7.1.6 Description: The issue allows attackers in a machine-in-the-middle position to gain read and write access to personally identifiable information PII and payroll data. It also enables them...

Microsoft Windows Routing and Remote Access Service 安全漏洞

Microsoft Windows Routing and Remote Access Service is a network service from Microsoft Corporation USA that is used to implement features such as network routing, virtual private networks VPNs, and dial-up connections. A security vulnerability exists in Microsoft Windows Routing and Remote Acces...

PT-2024-20661 · Check Point · Harmony Endpoint Security Client For Windows

Name of the Vulnerable Software and Affected Versions: Harmony Endpoint Security Client for Windows versions E88.10 and below Description: A local privilege escalation issue has been identified. To exploit this issue, an attacker must first obtain the ability to execute local privileged code on t...

Microsoft Windows Authentication Methods 安全漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. A security vulnerability exists in Microsoft Windows Authentication Methods. An attacker could exploit the vulnerability to elevate privileges. The following products and versions are...