CVE-2023-35080

CVE-2023-35080 affects Ivanti Secure Access Client for Windows. The public material in connected documents confirms a vulnerable configuration enabling a locally authenticated attacker to achieve elevation of privileges, denial of service, or information disclosure. A GitHub exploit linked to thi...

CVE-2023-39203

Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access...

Microsoft Windows NTFS Security Vulnerability

Microsoft Windows NTFS is a file system from Microsoft USA that serves computer files. The file system has error warning, disk self-repair, and logging capabilities. A security vulnerability exists in Microsoft Windows NTFS. An attacker exploiting this vulnerability could gain access to sensitive...

CVE-2023-35080: Incorrect Default Permissions

A vulnerability has been identified in the Ivanti Secure Access Windows client, which could allow a locally authenticated attacker to exploit a vulnerable configuration, potentially leading to various security risks, including the escalation of privileges, denial of service, or information...

PT-2023-6936 · Zoom · Zoom Rooms Client For Windows +1

Name of the Vulnerable Software and Affected Versions: Zoom Rooms Client for Windows affected versions not specified Zoom VDI Client affected versions not specified Description: The issue is related to an untrusted search path in the software, which may allow a privileged user to conduct a denial...

CVE-2023-5964

The 1E-Exchange-DisplayMessageinstruction that is part of the End-User Interaction product pack available on the 1E Exchange does not properly validate the Caption or Message parameters, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This...

CVE-2023-45163

The 1E-Exchange-CommandLinePing instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the input parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on...

CVE-2023-45161

The 1E-Exchange-URLResponseTime instruction that is part of the Network product pack available on the 1E Exchange does not properly validate the URL parameter, which allows for a specially crafted input to perform arbitrary code execution with SYSTEM permissions. This instruction only runs on...

CVE-2023-44220

SonicWall NetExtender Windows 32-bit and 64-bit client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could result in command execution in the target system...

SonicWall NetExtender Windows client security vulnerability

SonicWALL NetExtender Windows client is a Windows-based SSL VPN Virtual Private Network client application from SonicWALL, Inc. A security vulnerability exists in SonicWall NetExtender Windows client version 10.2.336 and earlier, which originates from a DLL hijacking vulnerability in the componen...

SonicWall NetExtender Windows Client DLL Search Order Hijacking Vulnerability

SonicWall NetExtender Windows 32 and 64-bit client 10.2.336 and earlier versions have a DLL Search Order Hijacking vulnerability in the start-up DLL component. Successful exploitation via a local attacker could result in command execution in the target system. SonicWall strongly advises SSL VPN...

Microsoft Windows Client/Server Runtime Subsystem Competition Condition Issue Vulnerability

Microsoft Windows is a suite of operating systems for use on personal devices from the U.S.-based Microsoft Corporation Microsoft. A security vulnerability exists in the Microsoft Windows Client/Server Runtime Subsystem. An attacker could exploit the vulnerability to remotely execute code. The...

CVE-2023-41766: Untrusted Search Path

Windows Client Server Run-time Subsystem CSRSS Elevation of Privilege Vulnerability...

Code injection

A cleartext transmission of sensitive information vulnerability has been reported to affect QVPN Device Client. If exploited, the vulnerability could allow local authenticated administrators to read sensitive data via unspecified vectors. We have already fixed the vulnerability in the following...

QNAP Systems QVPN Security Breach

QNAP Systems QVPN is a series of virtual private network software from QNAP Systems. A security vulnerability exists in QNAP Systems QVPN Device Client Windows versions prior to 2.2.0.0823, which stems from a Sensitive Information Explicit Transfer vulnerability that can be exploited by an attack...

QNAP Systems QVPN Security Breach

QNAP Systems QVPN is a series of virtual private network software from QNAP Systems. A security vulnerability exists in QNAP Systems QVPN Device Client Windows versions prior to 2.1.0.0518, which stems from the presence of an insufficiently protected credential that can be exploited by an attacke...

SonicWall Net Extender Repair Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability in SonicWall Net Extender MSI client for Windows 10.2.336 and earlier versions allows a local low-privileged user to gain system privileges through running the repair functionality. SonicWall strongly advises SSL VPN NetExtender client users to upgrade t...

Fail to print on Debian Client

Cannot print normally on the Debian Client. The printing failed on the Debian client, but the print operation is working fine on the Windows Client...

CVE-2023-38401 Local Privilege Escalation in HPE Aruba Networking Virtual Intranet Access (VIA) Microsoft Windows Client

A vulnerability in the HPE Aruba Networking Virtual Intranet Access VIA client could allow local users to elevate privileges. Successful exploitation could allow execution of arbitrary code with NT AUTHORITY\SYSTEM privileges on the operating system...

HPESBNW04527 rev.2 - Multiple Vulnerabilities in HPE Aruba Networking Virtual Intranet Access (VIA) Windows Client

Potential Security Impact: Local: Creation and Deletion of Arbitrary Files, Escalation of Privilege SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. Aruba Virtual Intranet Access VIA Windows Client Only - All versions 4.5 and lower CVSS Scores: | CVE | CVSS Vector | Base Score | |...