11752 matches found
CVE-2022-20499
In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L...
UBUNTU-CVE-2022-20499
In validateForCommonR1andR2 of PasspointConfiguration.java, uncaught errors in parsing stored configs could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12 Android-12L...
PT-2023-12656 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-12 through Android-13 Description: The issue arises from uncaught errors in parsing stored configurations within the validateForCommonR1andR2 function of PasspointConfiguration.java. This can lead to a local persisten...
PT-2023-17782 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-13 Description: The issue is related to uncaught exceptions in multiple functions of SnoozeHelper.java, which could lead to a failure to persist settings. This might result in a local escalation of...
PT-2023-1978 · Microsoft · Edge
Name of the Vulnerable Software and Affected Versions: Microsoft Edge Chromium-based affected versions not specified Description: The issue is related to synchronization errors, specifically a "race condition" scenario, which can be exploited to elevate privileges. Recommendations: At the moment,...
Workspace App for Mac - Known Issue - March 23rd 2023
When using Citrix Workspace App for Mac, users may receive the following errors: - Unable to communicate with Authentication Manager service - The Store doesn't exist. Please retry or contact support. - Citrix Workspace cannot connect to the server. Check your network connection. -Could not...
The vulnerability of the Microsoft Malware Protection Engine’s security module allows attackers to enhance their privileges within the system.
The vulnerability of the Microsoft Malware Protection Engine arises due to synchronization errors when using a shared resource. Exploiting this vulnerability can allow an attacker to increase their privileges within the system...
The vulnerability of the Resilient File System (ReFS) in Windows operating systems allows a hacker to increase their privileges within the system.
The vulnerability of the Resilient File System ReFS in Windows operating systems is related to errors in code generation. Exploiting this vulnerability can allow an attacker to gain elevated privileges within the system...
The vulnerability of Microsoft Defender for Endpoint’s Windows operating system allows a hacker to bypass existing security restrictions.
The vulnerability of Microsoft Defender for Endpoint’s Windows operating system is related to security configuration errors. Exploiting this vulnerability can allow a malicious actor to bypass existing security restrictions remotely...
GHSA-R95W-7CPX-H5MX Answer vulnerable to Business Logic Errors
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
Answer vulnerable to Business Logic Errors
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
GHSA-H2WG-83FC-XVM9 Answer vulnerable to Business Logic Errors
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
Answer vulnerable to Business Logic Errors
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1541
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
CVE-2023-1542
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
Code injection
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
Code injection
Business Logic Errors in GitHub repository answerdev/answer prior to 1.0.6...
The certificate authority is invalid or incorrect
EPA scan error. "Access Denied: your device does not meet requirements for logging on" "The certificate authority is invalid or incorrect." from nspex.txt...
CVE-2023-1542
CVE-2023-1542 concerns business logic errors in the open-source project answerdev/answer prior to version 1.0.6 . Connected sources confirm the affected component and version range and provide a remediation: upgrade to 1.0.6 or later . The issue is described consistently across Red Hat/OSV and ot...
CVE-2023-1541
CVE-2023-1541 affects the open-source project answerdev/answer prior to version 1.0.6. The issue is a Business Logic Error arising from improper permission handling in the password-reset workflow (the /answer/admin/api/user/password path). An attacker with low privileges can modify the user_id pa...