VMware Horizon Client Elevation of Privilege Vulnerability

VMware Horizon Client is a client application for connecting to VMware Horizon virtual desktops from VMware. An elevation of privilege vulnerability exists in VMware Horizon Client 5.x and earlier versions for Windows-based platforms, which can be exploited by a local attacker to run commands as ...

CVE-2020-5898

In versions 7.1.5-7.1.9, BIG-IP Edge Client Windows Stonewall driver does not sanitize the pointer received from the userland. A local user on the Windows client system can send crafted DeviceIoControl requests to \.\urvpndrv device causing the Windows kernel to crash...

Authorization

Actions Http-Client NPM @actions/http-client before version 1.0.8 can disclose Authorization headers to incorrect domain in certain redirect scenarios. The conditions in which this happens are if consumers of the http-client: 1. make an http request with an authorization header 2. that request...

Shenzhen Tencent Computer System Limited Tencent Game Box suffers from DLL hijacking vulnerability

Tencent game box is specially designed for web users to create game aids, with original hang-up bodyguard, convenient account multi-opening, exclusive game acceleration, selected game recommendations, high-quality game strategy, one-stop gift packages and other features. Shenzhen Tencent Computer...

Shanghai Qingman Network Technology Co., Ltd. 11 Matchmaking Platform has dll Hijacking Vulnerability

11 Matchmaking Platform is an eSports matchmaking platform developed by Gaming Network which has more than one game online matchmaking. Shanghai Qingman Network Technology Co., Ltd. 11 against the platform exists dll hijacking vulnerability, attackers can use the vulnerability in the client proce...

The vulnerability of Client programs in the MySQL database management system allows a hacker to cause a service failure.

The vulnerability of Client programs in the MySQL database management system is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

The vulnerability of the VNC client of the remote desktop management software UltraVNC allows a hacker to execute arbitrary code.

The vulnerability of the VNC client of the remote desktop management software UltraVNC is related to the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Code Execution Vulnerability in IS Voice PC Client

IS Voice was once a voice online group chat tool designed and developed specifically for Chinese players, and is now an entertainment community platform that integrates video performances, Karaoke entertainment, and social interaction. A code execution vulnerability exists in the IS Voice PC...

CVE-2019-4001

Improper input validation in Druva inSync Client 6.5.0 allows a local, authenticated attacker to execute arbitrary NodeJS code...

All K Song has a dll hijacking vulnerability

All K Song is a Tencent's K song software based on socialization of acquaintances, to meet friends with songs, singing life happily. It supports QQ and WeChat login, song ordering, song recording, MV recording, tuning, work saving and publishing. There is a dll hijacking vulnerability in the clie...

Cloud Calendar is vulnerable to dll hijacking

Cloud Calendar is a time management tool developed by Qingdao Softmedia Network Technology Co. A dll hijacking vulnerability exists in the Cloud Calendar client, which can be exploited by attackers to execute arbitrary code...

Cyxtera Technologies Unspecified Vulnerability in Cyxtera AppGate SDP Client

Cyxtera Technologies Cyxtera AppGate SDP is a software-defined network border protection solution from Cyxtera Technologies, U.S.A. Cyxtera AppGate SDP Client is one of the client programs. A security vulnerability exists in Cyxtera Technologies Cyxtera AppGate SDP Client versions 4.1.x through...

CVE-2019-16276

creationtimestamp| type| source ---|---|--- 2019-10-17 16:32:14+00:00| seen| https://t.me/cibsecurity/7478 2019-10-18 13:58:43+00:00| seen| https://t.me/SecLabNews/6022...

DEBIAN-CVE-2017-18635

An XSS vulnerability was discovered in noVNC before 0.6.2 in which the remote VNC server could inject arbitrary HTML into the noVNC web page via the messages propagated to the status field, such as the VNC server name...

The vulnerability in the client application of the Cisco Webex Teams software allows a perpetrator to execute arbitrary commands.

The vulnerability in the client application of the Cisco Webex Teams software exists because measures to neutralize specific elements have not been taken. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely by guiding users through a specially crafted lin...

GHSA-63QC-P2X4-9FGF Improper Handling of Exceptional Conditions and Origin Validation Error in Eclipse Paho Java client library

In the Eclipse Paho Java client library version 1.2.0, when connecting to an MQTT server using TLS and setting a host name verifier, the result of that verification is not checked. This could allow one MQTT server to impersonate another and provide the client library with incorrect information...

Information disclosure

An information disclosure vulnerability exists in Windows when the Windows SMB Client kernel-mode driver fails to properly handle objects in memory, aka 'Windows SMB Client Driver Information Disclosure Vulnerability'...

CVE-2019-0353

Under certain conditions SAP Business One client B1ONHANA, SAP-M-BO, before versions 9.2 and 9.3, allows an attacker to access information which would otherwise be restricted...

mysql: Client programs unspecified vulnerability (CPU Oct 2019)

Vulnerability in the MySQL Server product of Oracle MySQL component: Client programs. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL...

mysql: Client programs unspecified vulnerability (CPU Oct 2019)

Vulnerability in the MySQL Server product of Oracle MySQL component: Client programs. Supported versions that are affected are 5.6.44 and prior, 5.7.26 and prior and 8.0.16 and prior. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where MySQL...