8413 matches found
CVE-2024-45420: Uncontrolled Resource Consumption
Uncontrolled resource consumption in some Zoom Apps before version 6.2.0 may allow an authenticated user to conduct a denial of service via network access...
CVE-2024-45422: Improper Input Validation
Improper input validation in some Zoom Apps before version 6.2.0 may allow an unauthenticated user to conduct a denial of service via network access...
PT-2024-31625 · Zoom · Zoom Apps
Name of the Vulnerable Software and Affected Versions: Zoom Apps versions prior to 6.2.0 Description: The issue involves improper input validation, allowing an unauthenticated user to conduct a denial of service attack via network access. This can be exploited by unauthenticated users to launch...
Microsoft Office Code Execution
The vulnerability of Microsoft Office, Excel, and 365 Apps for Enterprise packages is related to the execution of operations outside the buffer in memory. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
Microsoft Security Update Validation Report November 2024
Microsoft’s November 2024 security updates have passed Citrix testing the updates are listed below. The testing is not all-inclusive; all tests are executed against English only environments and issues may still be found upon implementation. Follow best practices for testing and installing softwa...
Сrimeware and financial cyberthreats in 2025
Kaspersky's Global Research and Analysis Team constantly monitors known and emerging cyberthreats directed at the financial industry, with banks and fintech companies being the most targeted. We also closely follow threats that aim to infiltrate a wider range of industries, namely ransomware...
PT-2024-31621 · Zoom · Zoom Apps
Name of the Vulnerable Software and Affected Versions: Zoom Apps affected versions not specified Description: The issue is related to improper input validation in some Zoom Apps, which may allow an unauthenticated user to disclose information via network access. Recommendations: At the moment,...
Citrix Virtual Apps and Desktops Session Recording Multiple Vulnerabilities (CTX691941)
The version of Citrix Virtual Apps and Desktops installed on the remote Windows host is prior to 2407 hotfix 24.5.200.8, 1912 LTSR prior to CU9 hotfix 19.12.9100.6, 2203 LTSR prior to CU5 hotfix 22.03.5100.11, or 2402 LTSR prior to CU1 hotfix 24.02.1200.16. It is, therefore, affected by multiple...
CVE-2024-43089
In updateInternal of MediaProvider.java , there is a possible access of another app's files due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...
PT-2024-31829
Name of the Vulnerable Software and Affected Versions baltic-it TOPqw Webportal version 1.35.283.2 Description The issue is related to Incorrect Access Control in the User Management function, specifically in the /Apps/TOPqw/BenutzerManagement.aspx endpoint. This allows a low-privileged user to...
PT-2024-31831
Name of the Vulnerable Software and Affected Versions baltic-it TOPqw Webportal versions 1.35.287.1 through 1.35.290 Description The issue concerns a Cross-Site Scripting XSS vulnerability in the file upload function of the "QWKalkulation" tool. To exploit this vulnerability, an attacker must be...
PT-2024-31828
Name of the Vulnerable Software and Affected Versions baltic-it TOPqw Webportal versions 1.35.283.2 through 1.35.283.3 Description The login form of the baltic-it TOPqw Webportal at "/Apps/TOPqw/Login.aspx" is vulnerable to SQL injection. The vulnerability exists in the txtUsername parameter, whi...
New Flaws in Citrix Virtual Apps Enable RCE Attacks via MSMQ Misconfiguration
Cybersecurity researchers have disclosed new security flaws impacting Citrix Virtual Apps and Desktop that could be exploited to achieve unauthenticated remote code execution RCE The issue, per findings from watchTowr, is rooted in the Session Recording component that allows system administrators...
November 12, 2024—KB5046613 (OS Builds 19044.5131 and 19045.5131) - EXPIRED
None None...
PT-2024-8776
Name of the Vulnerable Software and Affected Versions: Microsoft Excel versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Microsoft Office versions affected versions not specified Microsoft Office Long Term Servicing Channel version...
PT-2024-8155 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Office versions affected versions not specified Microsoft Excel versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to a buffer overfl...
PT-2024-8550 · Microsoft · 365 Apps For Enterprise +2
Name of the Vulnerable Software and Affected Versions: Microsoft Excel affected versions not specified Microsoft Office affected versions not specified 365 Apps for Enterprise affected versions not specified Description: The issue is related to a memory usage problem after memory has been freed,...
KLA77110 PE vulnerability in Microsoft Apps
An elevation of privilege vulnerability was found in Microsoft Apps. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2024-49051 Exploitation CVE list CVE-2024-49051 high Solution Install necessary updates from the KB section, that are listed in your...
PT-2024-8515
Name of the Vulnerable Software and Affected Versions Citrix Virtual Apps and Desktops CVAD versions 1912 LTSR, 2203, 2402, and 2407 Description The issue is related to insecure privilege management in the Session Recording component of Citrix Virtual Apps and Desktops CVAD, allowing an attacker ...
Microsoft Graphics Component 资源管理错误漏洞
Microsoft Graphics Component is a graphics driver component from Microsoft Corporation USA. A resource management error vulnerability exists in Microsoft Graphics Component. An attacker exploiting this vulnerability could remotely execute code. The following products and editions are...