SUSE: Security Advisory (SUSE-SU-2024:2629-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE: Security Advisory (SUSE-SU-2024:2656-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Zoom Workplace Desktop App For Windows < 6.0.0 Race Condition (ZSB-24021)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.0. It is, therefore, affected by a race condition vulnerability that allow a local authenticated attacker to conduct a privilege escalation via local access. Note that Nessus has not tested for this...

Zoom Workplace Desktop App For Windows < 6.0.0 Improper Input Validation (ZSB-24019)

The version of Zoom Workplace Desktop App for Windows installed on the remote host is prior to 6.0.0. It is, therefore, affected by a improper input validation vulnerability that allow a local authenticated attacker to conduct a privilege escalation via local access. Note that Nessus has not test...

Zoom Workplace Desktop App < 6.0.0 Improper Input Validation (ZSB-24020)

The version of Zoom Workplace Desktop App installed on the remote host is prior to 6.0.0. It is, therefore, affected by a improper input validation vulnerability that allow a local authenticated attacker to conduct a denial of service via network access. Note that Nessus has not tested for this...

CVE-2024-42029

xdg-desktop-portal-hyprland aka an XDG Desktop Portal backend for Hyprland before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment...

(Pwn2Own) Docker Desktop extension-manager Exposed Dangerous Function Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Docker Desktop. An attacker must first obtain the ability to execute high-privileged code within the container in order to exploit this vulnerability. The specific flaw exists within the the implemention...

CVE-2024-42029

xdg-desktop-portal-hyprland aka an XDG Desktop Portal backend for Hyprland before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment...

CVE-2024-42029

The xdg-desktop-portal-hyprland software (an XDG Desktop Portal backend for Hyprland) is vulnerable to OS command execution in versions prior to 1.3.3 . The root cause is the improper neutralization of special elements used in an OS command, specifically because single quotes are not used when se...

CVE-2024-42029

xdg-desktop-portal-hyprland aka an XDG Desktop Portal backend for Hyprland before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment...

CVE-2024-42029

xdg-desktop-portal-hyprland aka an XDG Desktop Portal backend for Hyprland before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment...

xdg-desktop-portal-hyprland 安全漏洞

xdg-desktop-portal-hyprland is an open source XDG desktop portal for Hyprland by Hypr Development. A security vulnerability exists in xdg-desktop-portal-hyprland versions prior to 1.3.3 that stems from allowing execution of operating system commands...

CVE-2024-42029

xdg-desktop-portal-hyprland aka an XDG Desktop Portal backend for Hyprland before 1.3.3 allows OS command execution, e.g., because single quotes are not used when sending a list of app IDs and titles via the environment...

PT-2024-29694 · Unknown · Xdg-Desktop-Portal-Hyprland

Name of the Vulnerable Software and Affected Versions: xdg-desktop-portal-hyprland versions prior to 1.3.3 Description: The issue allows OS command execution due to the lack of single quotes when sending a list of app IDs and titles via the environment. This can be exploited because of how the...

Docker Desktop Daemon CLI External Control of File Path Denial-of-Service Vulnerability

This vulnerability allows local attackers to create a denial-of-service condition on affected installations of Docker Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2024-40872

There is an elevation of privilege vulnerability in server and client components of Absolute Secure Access prior to version 13.07. Attackers with local access and valid desktop user credentials can elevate their privilege to system level by passing invalid address data to the vulnerable component...

Critical Docker Engine Flaw Allows Attackers to Bypass Authorization Plugins

Docker is warning of a critical flaw impacting certain versions of Docker Engine that could allow an attacker to sidestep authorization plugins AuthZ under specific circumstances. Tracked as CVE-2024-41110, the bypass and privilege escalation vulnerability carries a CVSS score of 10.0, indicating...

[SECURITY] Fedora 40 Update: xdg-desktop-portal-hyprland-1.3.3-2.fc40

xdg-desktop-portal backend for hyprland...

VulnCheck KEV: CVE-2019-15637

Numerous Tableau products are vulnerable to XXE via a malicious workbook, extension, or data source, leading to information disclosure or a DoS. This affects Tableau Server, Tableau Desktop, Tableau Reader, and Tableau Public Desktop...

VulnCheck KEV: CVE-2017-4946

The VMware V4H and V4PA desktop agents 6.x before 6.5.1 contain a privilege escalation vulnerability. Successful exploitation of this issue could result in a low privileged windows user escalating their privileges to SYSTEM...