7322 matches found
Ivanti Secure Access Client Security Vulnerability
Ivanti Secure Access Client is a security software client from Ivanti. A security vulnerability exists in Ivanti Secure Access Client versions prior to 22.6R1.1, which stems from a vulnerability that allows locally authenticated attackers to exploit vulnerable configurations, resulting in...
RHEL 8 : librabbitmq (RHSA-2023:7150)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:7150 advisory. The librabbitmq packages provide an Advanced Message Queuing Protocol AMQP client library that allows you to communicate with AMQP servers using...
Telit Cinterion BGS5 Security Vulnerability
Telit Cinterion BGS5 is a mobile communication module from Telit Communications Telit. A security vulnerability exists in the Telit Cinterion BGS5 that stems from a relative path traversal vulnerability that could allow a local, low-privilege attacker to gain read/write access to protected files ...
CVE-2023-4632
An uncontrolled search path vulnerability was reported in Lenovo System Update that could allow an attacker with local access to execute code with elevated privileges...
PT-2023-28864 · Lenovo · Lenovo Desktop
Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the WMISwSmi module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the moment, the...
PT-2023-28863 · Lenovo · Lenovo Desktop
Name of the Vulnerable Software and Affected Versions: Lenovo Desktop products affected versions not specified Description: A buffer overflow was reported in the UltraFunctionTable module that may allow a local attacker with elevated privileges to execute arbitrary code. Recommendations: At the...
rabbitmq-c/librabbitmq: Insecure credentials submission
A flaw was found in librabbitmq. This issue occurs because credentials can only be entered on the command line for example, for amqp-publish or amqp-consume and are visible to local attackers by listing a process and its arguments...
CVE-2023-42542
Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device...
CVE-2023-42542
Improper access control vulnerability in Samsung Push Service prior to 3.4.10 allows local attackers to get register ID to identify the device...
CVE-2023-42538
An improper input validation in sapedrecsilence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42536
An improper input validation in sapeddec in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42537
An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42537
An improper input validation in getheadcrc in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
CVE-2023-42534
Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...
CVE-2023-42534
Improper input validation vulnerability in ChooserActivity prior to SMR Nov-2023 Release 1 allows local attackers to read arbitrary files with system privilege...
CVE-2023-42531
Improper access control vulnerability in SmsController prior to SMR Nov-2023 Release1 allows local attackers to bypass restrictions on starting activities from the background...
Input validation
An improper input validation in sapedrecsilence in libsaped prior to SMR Nov-2023 Release 1 allows local attackers to cause out-of-bounds read and write...
Input validation
Improper input validation vulnerability in ProcessWriteFile of libsec-ril prior to SMR Nov-2023 Release 1 allows local attackers to expose sensitive information...