Lucene search
+L

22045 matches found

CVE
CVE
•added 2023/12/13 10:17 p.m.•124 views

CVE-2023-43586

The CVE-2023-43586 issue is a path traversal vulnerability in Zoom components on Windows: Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows. The NVD entry describes authenticated privilege escalation via network access, supported by accompanying metrics showi...

8.8CVSS8.8AI score0.00991EPSS
SaveExploits0References1Affected Software4
Citrix
Citrix
•added 2023/12/13 12:00 a.m.•14 views

What does Generic Client IME feature do in a Citrix Virtual Desktop/App session?

The Generic Client IME feature offering the best input experience yet for Citrix customers...

7.1AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2023/12/13 12:00 a.m.•3 views

PT-2023-28872

Name of the Vulnerable Software and Affected Versions Zoom Desktop Client for Windows affected versions not specified Zoom VDI Client for Windows affected versions not specified Zoom SDKs for Windows affected versions not specified Description The issue allows an authenticated user to conduct an...

8.8CVSS5.8AI score0.00991EPSS
SaveExploits0References6
CNNVD
CNNVD
•added 2023/12/13 12:00 a.m.•37 views

Zoom VDI Client Security Vulnerability

Zoom VDI Client is a server-based computing model client from Zoom USA that allows you to deliver desktop images to endpoint devices over a network. A security vulnerability exists in Zoom. An attacker has exploited the vulnerability to perform privilege escalation via network access. The followi...

8.8CVSS7AI score0.00991EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/13 12:00 a.m.•6 views

CVE-2023-43586: Untrusted Search Path

Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access...

8.8CVSS7.8AI score0.00991EPSS
SaveExploits0References3
NVD
NVD
•added 2023/12/12 3:15 p.m.•36 views

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

9.8CVSS0.00725EPSS
SaveExploits0References1
Prion
Prion
•added 2023/12/12 3:15 p.m.•29 views

Design/Logic Flaw

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

7.5CVSS7.7AI score0.00725EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2023/12/12 2:32 p.m.•67 views

CVE-2023-6593

CVE-2023-6593 concerns a client-side permission bypass in Devolutions Remote Desktop Manager (iOS) 2023.3.4.0 and earlier. According to Red Hat and related sources, an attacker who has access to the application can execute entries in a SQL data source without restriction. The vulnerability is des...

9.8CVSS9.3AI score0.00725EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2023/12/12 2:32 p.m.•43 views

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

9.6AI score0.00725EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2023/12/12 2:32 p.m.•20 views

CVE-2023-6593

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

7.7AI score0.00725EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2023/12/12 12:00 a.m.•18 views

Devolutions Remote Desktop Manager Security Vulnerability

Devolutions Remote Desktop Manager is an application from Devolutions Canada. It provides remote desktop management functionality. A security vulnerability exists in Devolutions Remote Desktop Manager version 2023.3.4.0 and prior versions, which originated from a vulnerability that allows an...

9.8CVSS7.6AI score0.00725EPSS
SaveExploits0References2
Citrix
Citrix
•added 2023/12/12 12:00 a.m.•15 views

Keyboard language switching automatically on different applications inside the desktop ICA session

When switching between applications within the ICA desktop, the keyboard language is switched automatically...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/12 12:00 a.m.•5 views

CVE-2023-6593: Incorrect Permission Assignment for Critical Resource

Client side permission bypass in Devolutions Remote Desktop Manager 2023.3.4.0 and earlier on iOS allows an attacker that has access to the application to execute entries in a SQL data source without restriction...

9.8CVSS8.3AI score0.00725EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2023/12/12 12:00 a.m.•6 views

PT-2023-32708

Name of the Vulnerable Software and Affected Versions Devolutions Remote Desktop Manager versions 2023.3.4.0 and earlier Description A client-side permission bypass issue in Devolutions Remote Desktop Manager on iOS allows an attacker with access to the application to execute entries in a SQL dat...

9.8CVSS6.1AI score0.00725EPSS
SaveExploits0References6
AlmaLinux
AlmaLinux
•added 2023/12/11 12:00 a.m.•52 views

Important: tracker-miners security update

Tracker is a powerful desktop-neutral first class object database, tag/metadata database and search tool. This package contains various miners and metadata extractors for tracker. Security Fixes: tracker-miners: sandbox escape CVE-2023-5557 For more details about the security issues, including th...

7.7CVSS7.3AI score0.0086EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
•added 2023/12/08 12:00 a.m.•24 views

The vulnerability of the Artifactory platform for developing and delivering Docker Desktop container applications allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Artifactory platform for developing and delivering Docker container applications is related to the transmission of registry data in an open format due to the use of HTTP instead of HTTPS protocols. Exploiting this vulnerability can allow a malicious actor to gain...

5.9CVSS7.2AI score0.00549EPSS
SaveExploits1References4Affected Software1
CNNVD
CNNVD
•added 2023/12/07 12:00 a.m.•22 views

Devolutions Workspace Security Breach

Devolutions Workspace is a mobile and desktop application from Devolutions Canada. A security vulnerability exists in Devolutions Workspace version 2023.3.2.0 and earlier, which stems from the fact that an attacker with privileged access to the Workspace application can access credentials while...

6.5CVSS6.5AI score0.00589EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2023/12/07 12:00 a.m.•48 views

Ubuntu 18.04 ESM : FreeRDP vulnerabilities (USN-6522-2)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-6522-2 advisory. USN-6522-1 fixed several vulnerabilities in FreeRDP. This update provides the corresponding update for Ubuntu 18.04 LTS. Tenable has extracted the...

9.8CVSS7AI score0.01809EPSS
SaveExploits2References4
OSV
OSV
•added 2023/12/06 2:15 p.m.•14 views

CVE-2023-6288

Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLIBINSERTLIBRARIES environment variable...

7.8CVSS6AI score0.00314EPSS
SaveExploits0References1
NVD
NVD
•added 2023/12/06 2:15 p.m.•31 views

CVE-2023-6288

Code injection in Remote Desktop Manager 2023.3.9.3 and earlier on macOS allows an attacker to execute code via the DYLIBINSERTLIBRARIES environment variable...

7.8CVSS0.00314EPSS
SaveExploits0References1
Rows per page
Query Builder