CVE-2024-0715

Expression Language Injection vulnerability in Hitachi Global Link Manager on Windows allows Code Injection.This issue affects Hitachi Global Link Manager: before 8.8.7-03...

The vulnerability of the USB Generic Parent driver in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the USB Generic Driver in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

BeyondTrust Privilege Management Security Vulnerability

BeyondTrust Privilege Management is the BeyondTrust Privilege Management tool for Windows and Mac SaaS from BeyondTrust USA. A security vulnerability exists in BeyondTrust Privilege Management for Windows versions prior to 24.1. An attacker could exploit the vulnerability to view Sysvol...

CVE-2024-21344

Windows Network Address Translation NAT Denial of Service Vulnerability...

CVE-2024-21341 Windows Kernel Remote Code Execution Vulnerability

...

CVE-2024-21351 Windows SmartScreen Security Feature Bypass Vulnerability

...

PT-2024-3262 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to uncontrolled resource consumption in some IntelR ThunderboltTM DCH drivers for Windows, which may allow an authenticated user to potentiall...

Microsoft WDAC OLE DB provider for SQL Security Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft WDAC OLE DB provider for SQL. The following products and versions are affected: Windows 10 Version 1809...

PT-2024-3284 · Intel · Intel Thunderbolt Dch Drivers

Name of the Vulnerable Software and Affected Versions: IntelR ThunderboltTM DCH drivers for Windows versions prior to 88 Description: The issue is related to improper buffer restrictions in some IntelR ThunderboltTM DCH drivers for Windows, which may allow a privileged user to potentially enable...

Intel® QAT Software Drivers Advisory

Summary: A potential security vulnerability in some Intel® QuickAssist Technology QAT software drivers for Windows may allow denial of service. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2023-41252 Description: Out-of-bounds rea...

The vulnerability of the Kernel-mode operating system driver in Windows allows a hacker to increase their privileges.

The vulnerability of the Kernel-mode operating system drivers in Windows is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

CVE-2024-23769

Improper privilege control for the named pipe in Samsung Magician PC Software 8.0.0 for Windows allows a local attacker to read privileged data...

Dell Display Manager Backlink Vulnerability

Dell Display Manager is a Windows application from Dell, Inc. It is used to manage a monitor or a group of monitors. A security vulnerability exists in Dell Display Manager version 2.1.1.17 and earlier versions. An attacker can exploit this vulnerability to delete arbitrary folders or files...

CVE-2023-51711

An issue was discovered in Regify Regipay Client for Windows version 4.5.1.0 allows DLL hijacking: a user can trigger the execution of arbitrary code every time the product is executed...

CVE-2024-23678 Deserialization of Untrusted Data on Splunk Enterprise for Windows through Path Traversal from Separate Disk Partition

In Splunk Enterprise for Windows versions below 9.0.8 and 9.1.3, Splunk Enterprise does not correctly sanitize path input data. This results in the unsafe deserialization of untrusted data from a separate disk partition on the machine. This vulnerability only affects Splunk Enterprise for Windows...

The vulnerability of the TCP/IP protocol implementation in Windows operating systems allows attackers to disclose sensitive information.

The vulnerability of the TCP/IP protocol implementation in Windows operating systems is related to deficiencies in the access control mechanism. Exploiting this vulnerability allows a malicious actor to disclose protected information remotely...

The vulnerability of the Local Security Authority Subsystem Service (LSASS) in the Windows operating system allows a hacker to disclose protected information.

The vulnerability of the Local Security Authority Subsystem Service LSASS in the Windows operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

CVE-2023-6335

Improper Link Resolution Before File Access 'Link Following' vulnerability in HYPR Workforce Access on Windows allows User-Controlled Filename.This issue affects Workforce Access: before 8.7...

CVE-2023-6334

Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in HYPR Workforce Access on Windows allows Overflow Buffers.This issue affects Workforce Access: before 8.7...

PT-2024-1273 · Hitachi · Hitachi Tuning Manager

Name of the Vulnerable Software and Affected Versions: Hitachi Tuning Manager versions prior to 8.8.5-04 Description: The issue is related to incorrect default permissions in the Hitachi Tuning Manager server component on Windows, allowing local users to read and write specific files. This can be...