7322 matches found
CVE-2023-51776
Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges and execute arbitrary code...
CVE-2023-51776
Improper privilege management in Jungo WinDriver before 12.1.0 allows local attackers to escalate privileges and execute arbitrary code...
PT-2024-18809 · Samsung · Samsung Mobile Devices +1
Name of the Vulnerable Software and Affected Versions: Software affected versions not specified Description: The issue involves the use of implicit intent for sensitive communication in Configuration messages, allowing local attackers to obtain sensitive information. This affects versions prior t...
CVE-2024-22106
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service DoS...
PT-2024-18811 · Unknown · Softphoneclient
Name of the Vulnerable Software and Affected Versions: SoftphoneClient in IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue allows local attackers to obtain sensitive information due to the use of implicit intent for sensitive communication in the SoftphoneClient...
PT-2024-26010 · Systemui · Systemui
Name of the Vulnerable Software and Affected Versions: SystemUI versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control in the clickAdapterItem of SystemUI, allowing local attackers to launch privileged activities. Recommendations: For versions prior ...
CVE-2024-22106
Jungo WinDriver is affected by CVE-2024-22106 (prior to 12.5.1). The issue is improper privilege management (CWE-269) that enables a local attacker to escalate privileges, execute arbitrary code, or cause a Denial of Service. The vulnerability affects WinDriver components and device driver develo...
PT-2024-18800 · Samsung · One Ui Home
Name of the Vulnerable Software and Affected Versions: OneUIHome versions prior to SMR Jul-2024 Release 1 Description: The issue is related to improper access control, allowing local attackers to launch privileged activities. User interaction is required to trigger this issue. Recommendations: Fo...
PT-2024-26012 · Samsung · Samsung Health
Name of the Vulnerable Software and Affected Versions: Samsung Health versions prior to 6.27.0.113 Description: The issue is related to improper input validation, allowing local attackers to write arbitrary document files to the sandbox of Samsung Health. This requires user interaction to trigger...
Jungo WinDriver 安全漏洞
Jungo WinDriver is a device driver development toolkit from Israel's Jungo that supports any device, regardless of its chip vendor, with the ability to focus on the value-added functionality of the driver rather than the operating system internals. An out-of-bounds write vulnerability exists in...
CVE-2024-22106
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges, execute arbitrary code, or cause a Denial of Service DoS...
CVE-2024-25088
Improper privilege management in Jungo WinDriver before 12.5.1 allows local attackers to escalate privileges and execute arbitrary code...
PT-2024-18812 · Ims · Ims
Name of the Vulnerable Software and Affected Versions: IMS service versions prior to SMR Jul-2024 Release 1 Description: The issue concerns the use of implicit intent for sensitive communication in the RCS function of the IMS service, allowing local attackers to obtain sensitive information...
CVE-2024-25088
CVE-2024-25088 affects Jungo WinDriver prior to 12.5.1. The issue is improper privilege management that enables a local attacker to escalate privileges and execute arbitrary code. Public sources consistently identify local privilege escalation as the impact; no remote exploitation is indicated. M...
CVE-2023-7270
CVE-2023-7270 affects SoftMaker Office 2024/NX (before rev 1214) and FreeOffice 2014 (before rev 1215); FreeOffice 2021 is affected but will not be fixed. The MSI repair function can spawn a visible conhost.exe running as SYSTEM, enabling a local, low-privilege attacker to chain actions and launc...
Linux Kernel Use-After-Free Vulnerability
Linux Kernel contains a use-after-free vulnerability in the nftobject, allowing local attackers to escalate privileges...
CVE-2024-6060
An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information...
CVE-2024-6060
An information disclosure vulnerability in Phloc Webscopes 7.0.0 allows local attackers with access to the log files to view logged HTTP requests that contain user passwords or other sensitive information...
CVE-2024-5009
In WhatsUp Gold versions released before 2023.1.3, an Improper Access Control vulnerability in Wug.UI.Controllers.InstallController.SetAdminPassword allows local attackers to modify admin's password...
