7322 matches found
PT-2024-18743 · Unknown · Customfrequencymanagerservice
Name of the Vulnerable Software and Affected Versions: CustomFrequencyManagerService versions prior to SMR Mar-2024 Release 1 Description: The issue is related to an improper access control vulnerability in the CustomFrequencyManagerService. This vulnerability allows local attackers to execute...
PT-2024-18745 · Samsung · Samsung Internet
Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 24.0.0.41 Description: The issue arises from improper handling of granting permission for Trusted Web Activities in Samsung Internet, allowing local attackers to grant permission to their own TWA WebApps...
PT-2024-15361 · Dell · Dell Digital Delivery
Name of the Vulnerable Software and Affected Versions: Dell Digital Delivery versions prior to 5.2.0.0 Description: The issue is a Use After Free Vulnerability that could be exploited by a local low privileged attacker, potentially leading to application crash or execution of arbitrary code...
Information disclosure
An issue was discovered in Webbax "Super Newsletter" supernewsletter module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information...
CVE-2024-25839
An issue was discovered in Webbax "Super Newsletter" supernewsletter module for PrestaShop versions 1.4.21 and before, allows local attackers to escalate privileges and obtain sensitive information...
DEBIAN-CVE-2024-20328
A vulnerability in the VirusEvent feature of ClamAV could allow a local attacker to inject arbitrary commands with the privileges of the application service account.The vulnerability is due to unsafe handling of file names. A local attacker could exploit this vulnerability by supplying a file nam...
NI FlexLogger SkylineService Missing Authorization Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of NI FlexLogger. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SkylineService...
Vulnerability fixed in CheckMK
A vulnerability has been fixed in the CheckMK Windows Agent. The vulnerability allows an authenticated local malicious agent to able to execute with arbitrary code under higher privileges. CheckMK has released updates to fix the vulnerability. For more information, see:...
MAXON CINEMA 4D Security Vulnerability
Maxon Cinema 4D is a three-dimensional drawing software from the German company Maxon. A security vulnerability exists in MAXON CINEMA 4D version R2024.2.0, which originated from a vulnerability that allows a local attacker to execute arbitrary code via a specially crafted c4dbase.xdl64 file...
Fedora 38 : rear (2024-49ddbf447d)
The remote Fedora 38 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-49ddbf447d advisory. Fri Feb 9 2024 Luk Zaoral - 2.7-8 - Sync with patches in CentOS Stream 9 kudos to @pcahyna! chronologically from the latest: - Resolve libs for...
Siemens SIMATIC CP products Uncontrolled Resource Consumption (CVE-2023-37195)
A vulnerability has been identified in SIMATIC CP 1604 All versions, SIMATIC CP 1616 All versions, SIMATIC CP 1623 All versions, SIMATIC CP 1626 All versions, SIMATIC CP 1628 All versions. Affected devices insufficiently control continuous mapping of direct memory access DMA requests. This could...
ESET Smart Security Premium ekrn Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of ESET Smart Security Premium. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ESET...
CVE-2023-38960
Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute arbitrary code via crafted executable running from the installation directory...
PT-2024-8598 · G Data · G Data Total Security
Name of the Vulnerable Software and Affected Versions: G DATA Total Security affected versions not specified Description: The issue is related to incorrect permission assignment, allowing local attackers to escalate privileges on affected installations. The specific flaw exists within the handlin...
X.Org Server XIQueryPointer Improper Validation of Array Index Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of X.Org Server. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the ProcXIQueryPointer...
CVE-2024-20824
Implicit intent hijacking vulnerability in VoiceSearch of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent...
CVE-2024-20823
Implicit intent hijacking vulnerability in SamsungAccount of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent...
CVE-2024-20825
Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent...