23241 matches found
Mattermost 安全漏洞
Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from a failure to disable modification of local users when synchronizing users in a shared channel. An attacker could use the vulnerability t...
CVE-2024-27358
An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service DoS...
CVE-2024-27358
A security vulnerability exists in WithSecure Elements Agent and WithSecure Elements Client Security (versions through 23.x ) for macOS . The issue allows local users to block an administrator from completing an installation, resulting in a Denial-of-Service (DoS) . To remediate this, users shoul...
CVE-2024-27358
An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service DoS...
kernel: vmwgfx: use-after-free in vmw_cmd_res_check
A use-after-free vulnerability was found in the Linux kernel's vmwgfx driver in vmwcmdrescheck. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, who can issue an ioctl on the resulting file descriptor, to crash the system, causing a...
Zoom Workplace Security Vulnerability
Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from improper input validation in the desktop application installer could allow an authenticated user to perform a denial of service via local access...
PT-2024-22642 · Toshiba · Sharp/Toshiba Tec Mfps
Name of the Vulnerable Software and Affected Versions: Sharp/Toshiba Tec MFPs affected versions not specified Description: The issue allows any local user of the device to examine coredump files, which are stored with world-readable permission when the device crashes. This enables the user to...
CVE-2024-38531
Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assu...
CVE-2024-22385
Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read and write specific files.This issue affects Hitachi Storage Provider for VMware vCenter: from 3.1.0 before 3.7.4...
CVE-2024-22385 File and Directory Permission Vulnerability in Hitachi Storage Provider for VMware vCenter
Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read and write specific files.This issue affects Hitachi Storage Provider for VMware vCenter: from 3.1.0 before 3.7.4...
PT-2024-4569
Name of the Vulnerable Software and Affected Versions: Hitachi Storage Provider for VMware vCenter versions 3.1.0 through 3.7.3 Description: The issue is related to incorrect default permissions, allowing local users to read and write specific files. This could potentially enable an attacker to...
Advisory ROSA-SA-2024-2432
Software: man-db 2.7.6.1 OS: ROSA Virtualization 2.1 packageevrstring: man-db-2.7.6.1 CVE-ID: CVE-2018-25078 BDU-ID: None CVE-Crit: N/A CVE-DESC.: man-db in Gentoo allows local users with access to the man user account to gain root privileges, because /usr/bin/mandb is executed by the root user,...
RLSA-2024:3184 Moderate: grub2 security update
The grub2 packages provide version 2 of the Grand Unified Boot Loader GRUB, a highly configurable and customizable boot loader with modular architecture. The packages support a variety of kernel formats, file systems, computer architectures, and hardware devices. Security Fixes: grub2:...
Rocky Linux 8 : grub2 (RLSA-2024:3184)
The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2024:3184 advisory. grub2: grub2-set-bootflag can be abused by local pseudo-users CVE-2024-1048 grub2: Out-of-bounds write at fs/ntfs.c may lead to unsigned code execution...
Dell ThinOS Information Disclosure Vulnerability
Dell ThinOS is a client operating system from Dell USA. An information disclosure vulnerability exists in Dell ThinOS 2402 Telemetry Dashboard v1.0.0.8, which originates from allowing an unauthenticated user with local access to the device to disclose information...
CVE-2024-5908
A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in application logs. Normally, these application logs are only viewable by local users and are included when generating logs for troubleshooting...
PT-2024-4211 · Palo Alto Networks · Palo Alto Networks Globalprotect
Name of the Vulnerable Software and Affected Versions: Palo Alto Networks GlobalProtect App affected versions not specified Description: A problem with the Palo Alto Networks GlobalProtect app can result in exposure of encrypted user credentials, used for connecting to GlobalProtect, in applicati...
AZL-51921 CVE-2022-4968 affecting package netplan for versions less than 1.0.1-1
netplan leaks the private key of wireguard to local users. Versions after 1.0 are not affected...