CVE-2024-36078

In Zammad before 6.3.1, a Ruby gem bundled by Zammad is installed with world-writable file permissions. This allowed a local attacker on the server to modify the gem's files, injecting arbitrary code into Zammad processes which run with the environment and permissions of the Zammad user...

TotalAV 安全漏洞

TotalAV is a suite of computer security protection software that supports multiple platforms. The software includes virus protection, anti-phishing and anti-spyware features. A security vulnerability exists in TotalAV version v.6.0.740, which stems from the presence of an insecure privilege...

Samsung Notes 安全漏洞

SAMSUNG Notes is a software application from the South Korean company Samsung SAMSUNG. It is used to provide a note-taking function. A security vulnerability exists in Samsung Notes prior to version 4.4.15 that stems from incorrect input validation allowing a local attacker to delete files with...

PT-2024-22497 · Flipsnack · Flipsnack

Name of the Vulnerable Software and Affected Versions: Flipsnack version 18/03/2024 Description: An issue in Flipsnack allows a local attacker to obtain sensitive information via the reader.gz.js file. Recommendations: For Flipsnack version 18/03/2024, consider restricting access to the...

The vulnerability of the kmap_local() function in the Linux operating system’s kernel allows a hacker to cause a service failure.

The vulnerability of the kmaplocal function in the Linux operating system’s kernel is related to the doubling of the number of fixmap slots allocated for each processor that are used by kmaplocal. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2023-51797

Buffer Overflow vulnerability in Ffmpeg v.N113007-g8d24a28d06 allows a local attacker to execute arbitrary code via the libavfilter/avfshowwaves.c:722:24 in showwavesfilterframe...

CVE-2024-29744

In tmugetgovtimewindows, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

PT-2024-21764 · Google · Android

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to a missing bounds check in the tmu get tr stats function of tmu.c, which could lead to a possible out of bounds read. This might...

PT-2024-18058 · Unknown · Sante Dicom Viewer Pro

Name of the Vulnerable Software and Affected Versions: Sante DICOM Viewer Pro versions 14.0.3 and prior Description: A local attacker could disclose information or execute arbitrary code by opening a malicious DICOM file. Recommendations: For versions 14.0.3 and prior, avoid opening untrusted or...

PT-2024-38413

Name of the Vulnerable Software and Affected Versions oFono affected versions not specified Description This issue allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit...

PT-2024-20936

Name of the Vulnerable Software and Affected Versions MAXON CINEMA 4D version R2024.2.0 Description An issue in MAXON CINEMA 4D allows a local attacker to execute arbitrary code via a crafted c4d base.xdl64 file. Recommendations For MAXON CINEMA 4D version R2024.2.0, consider removing or...

Privilege escalation

Local privilege escalation vulnerability potentially allowed an attacker to misuse ESET’s file operations to delete files without having proper permission...

PT-2024-18726 · Unknown · Libsthmbc.So

Name of the Vulnerable Software and Affected Versions: libsthmbc.so versions prior to SMR Feb-2024 Release 1 Description: The issue is related to Out-of-bounds Write vulnerabilities in the svc1td vld plh ap function of libsthmbc.so. This allows local attackers to trigger a buffer overflow...

CVE-2024-22236

In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guava dependency in...

Information disclosure

In Spring Cloud Contract, versions 4.1.x prior to 4.1.1, versions 4.0.x prior to 4.0.5, and versions 3.1.x prior to 3.1.10, test execution is vulnerable to local information disclosure via temporary directory created with unsafe permissions through the shaded com.google.guava:guava dependency in...

CVE-2023-42723

In camera service, there is a possible out of bounds read due to a missing bounds check. This could lead to local denial of service with no additional execution privileges needed...

Information disclosure

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

Information disclosure

In dialer, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-42703

In firewall service, there is a possible way to write permission usage records of an app due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed...

CVE-2023-21295

In SliceManagerService, there is a possible way to check if a content provider is installed due to a missing null check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...