CVE-2023-42566

CVE-2023-42566 targets the libsavsvc component used in Samsung Mobile devices. The issue is described as an out-of-bounds write, with the root cause tied to libsavsvc prior to the SMR Dec-2023 Release 1. The documented impact is local code execution by attackers, with consequences described as ar...

CVE-2023-42565

Improper input validation vulnerability in Smart Clip prior to SMR Dec-2023 Release 1 allows local attackers with shell privilege to execute arbitrary code...

CVE-2023-42565

Summary: CVE-2023-42565 affects Samsung Smart Clip prior to SMR Dec-2023 Release 1. The issue is an improper input validation vulnerability that enables local attackers with shell privileges to execute arbitrary code. The primary affected component is Smart Clip, with the root cause stated as inp...

CVE-2023-47304

An issue was discovered in Vonage Box Telephone Adapter VDV23 version VDV21-3.2.11-0.5.1, allows local attackers to bypass UART authentication controls and read/write arbitrary values to the memory of the device...

PT-2023-28437 · Unknown · Smart Manager

Name of the Vulnerable Software and Affected Versions: SmartManagerCN versions prior to SMR Dec-2023 Release 1 Description: The issue is related to improper access control, allowing local attackers to access arbitrary files with system privilege. Recommendations: For versions prior to SMR Dec-202...

Oracle Linux 8 : librabbitmq (ELSA-2023-7150)

The remote Oracle Linux 8 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-7150 advisory. 0.9.0-4 - Resolves: 2215765, insecure credentials submission Tenable has extracted the preceding description block directly from the Oracle Linux security...

CVE-2023-42774

in OpenHarmony v3.2.2 and prior versions allow a local attacker get confidential information through incorrect default permissions...

CVE-2023-6119

An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...

Vulnerability fixed in Adobe Animate

Adobe has fixed a vulnerability in Animate. A local malicious party could exploit the vulnerability to gain access to sensitive data. The malicious party does not need any prior authorizations required. Adobe has released updates to fix the vulnerability in Animate 24.0 and 23.0.3. For more...

Oracle Linux 9 : librabbitmq (ELSA-2023-6482)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6482 advisory. 0.11.0-7 - add missing gating.yaml - fix rpminspect issue Related: 2215766 0.11.0-6 - Resolves: 2215766, insecure credentials submission Tenable has extracted t...

rabbitmq-c/librabbitmq: Insecure credentials submission

A flaw was found in librabbitmq. This issue occurs because credentials can only be entered on the command line for example, for amqp-publish or amqp-consume and are visible to local attackers by listing a process and its arguments...

CVE-2023-6006

This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must have local write access to the C Drive. In addition, Print Archiving must be enabled or the attacker needs to encounter a misconfigured system. This vulnerabilit...

CVE-2023-6006 Privilege Escalation Vulnerability

This vulnerability potentially allows local attackers to escalate privileges on affected installations of PaperCut NG. An attacker must have local write access to the C Drive. In addition, Print Archiving must be enabled or the attacker needs to encounter a misconfigured system. This vulnerabilit...

Ivanti Secure Access Client Security Vulnerability

Ivanti Secure Access Client is a security software client from Ivanti. A security vulnerability exists in Ivanti Secure Access Client versions prior to 22.6R1.1, which stems from a vulnerability that allows locally authenticated attackers to exploit vulnerable configurations, resulting in a denia...

Trend Micro Apex One Security Agent Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Inventory Management System SQL Injection Vulnerability

Inventory Management System is an inventory management system by the individual developer of stemword. A SQL injection vulnerability exists in Inventory Management System version V1.0, which originates from a vulnerability that allows local attackers to execute arbitrary SQL commands via the id...

Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

Inventory Management System Security Vulnerability

Inventory Management System is an inventory management system by the individual developers of stemword. A security vulnerability in Inventory Management System version 1.0 exists that allows local attackers to execute arbitrary code via the name, uname, and email parameters in the Registration.ph...

Trend Micro Apex One Origin Validation Error Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Trend Micro Apex One Security Agent. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within...

CentOS 8 : librabbitmq (CESA-2023:7150)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2023:7150 advisory. - An issue was discovered in the C AMQP client library aka rabbitmq-c through 0.13.0 for RabbitMQ. Credentials can only be entered on the command line e.g., for...