22047 matches found
Oracle Linux 8 : flatpak (ELSA-2023-7038)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-7038 advisory. 1.10.8-1 - Rebase to 1.10.8 2222103 - Fix CVE-2023-28100 and CVE-2023-28101 2180311 Tenable has extracted the preceding description block directly from...
Debian: Security Advisory (DLA-3654-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 37 Update: tigervnc-1.13.1-6.fc37
Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. This package contains a client which will allow you ...
The vulnerability of the Microsoft DWM Core Library on Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Microsoft DWM Core Library on Windows operating systems relates to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...
[SECURITY] Fedora 39 Update: tigervnc-1.13.1-6.fc39
Virtual Network Computing VNC is a remote display system which allows you to view a computing 'desktop' environment not only on the machine where it is running, but from anywhere on the Internet and from a wide variety of machine architectures. This package contains a client which will allow you ...
Debian dla-3654 : freerdp2-dev - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3654 advisory. ------------------------------------------------------------------------- Debian LTS Advisory DLA-3654-1 [email protected]...
Oracle Linux 9 : flatpak (ELSA-2023-6518)
The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-6518 advisory. 1.12.8-1 - Update to 1.12.8 CVE-2023-28100, CVE-2023-28101 Resolves: 2180312, 2221792 Tenable has extracted the preceding description block directly fr...
CVE-2023-39203
Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access...
CVE-2023-39203
CVE-2023-39203 affects Zoom Desktop Client for Windows and Zoom VDI Client within Zoom Team Chat, where uncontrolled resource consumption could allow an unauthenticated user to disclose information via network access. Public records confirm this as a resource-management vulnerability tied to Zoom...
CVE-2023-36033
Windows DWM Core Library Elevation of Privilege Vulnerability...
Zoom Client Resource Management Error Vulnerability
Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A resource management error vulnerability exists in Zoom VDI Client and Zoom Desktop Client that stems from uncontrolled resource consumption. It could allow an unauthenticated user to disclose...
VulnCheck KEV: CVE-2023-36033
Microsoft Windows Desktop Window Manager DWM Core Library contains an unspecified vulnerability that allows for privilege escalation...
PT-2023-6934 · Zoom · Zoom Desktop Client For Windows +1
Name of the Vulnerable Software and Affected Versions: Zoom Desktop Client for Windows versions affected versions not specified Zoom VDI Client versions affected versions not specified Description: The issue is related to uncontrolled resource consumption in Zoom Team Chat, which may allow an...
Microsoft Windows Desktop Window Manager (DWM) Core Library Privilege Escalation Vulnerability
Microsoft Windows Desktop Window Manager DWM Core Library contains an unspecified vulnerability that allows for privilege escalation...
CVE-2023-39203: Memory Allocation with Excessive Size Value
Uncontrolled resource consumption in Zoom Team Chat for Zoom Desktop Client for Windows and Zoom VDI Client may allow an unauthenticated user to conduct a disclosure of information via network access...
Google Chrome < 119.0.6045.159 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 119.0.6045.159. It is, therefore, affected by multiple vulnerabilities as referenced in the 202311stable-channel-update-for-desktop14 advisory. - Use after free in Navigation in Google Chrome prior to 119.0.6045.159...
ALSA-2023:7038 Moderate: flatpak security, bug fix, and enhancement update
Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. The following packages have been upgraded to a later upstream version: flatpak 1.10.8. BZ2222103 Security Fixes: flatpak: TIOCLINUX can send commands outside sandbox if running on a virtual consol...
Signal is testing usernames so you don’t have to share your phone number
Messaging service Signal is testing support for usernames as a replacement for phone numbers to serve as user identities. Signal provides encrypted instant messaging and is popular among people that value their privacy. Compared to more popular services like WhatsApp, Signal offers more layers of...
The vulnerability of the auth_start_session() function on the XRDP server allows a hacker to trigger a service failure.
The vulnerability of the authstartsession function on the XRDP server relates to bypassing session restrictions. Exploiting this vulnerability could allow a malicious actor to cause service failures...