CVE-2024-28829 Privilege escalation in mk_informix plugin

Least privilege violation and reliance on untrusted inputs in the mkinformix Checkmk agent plugin before Checkmk 2.3.0p12, 2.2.0p32, 2.1.0p47 and 2.0.0 EOL allows local users to escalate privileges...

CVE-2024-28829

CVE-2024-28829 affects the Checkmk agent plugin for Informix (mk_informix). The root cause is a least-privilege violation combined with reliance on untrusted inputs, allowing local users to escalate privileges. Affected products/versions include Checkmk prior to 2.3.0p12, prior to 2.2.0p32, prior...

SUSE CVE-2024-21810

Improper input validation in the Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters before version 28.3 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-5915

A privilege escalation PE vulnerability in the Palo Alto Networks GlobalProtect app on Windows devices enables a local user to execute programs with elevated privileges...

PT-2024-8113 · Ocean Data Systems · Ocean Data Systems Dream Report

Name of the Vulnerable Software and Affected Versions: Ocean Data Systems Dream Report affected versions not specified Description: The issue is related to an incorrect permission vulnerability. This could allow a local unprivileged attacker to escalate their privileges and potentially cause a...

Improper Access Control

github.com/mattermost/mattermost-server is vulnerable Improper Access Control. The vulnerability is caused due to a failure in disallowing the modification of local users when syncing users in shared channels. This allows a malicious remote user to overwrite an existing local user...

GO-2024-3025 Mattermost failed to disallow the modification of local users when syncing users in shared channels in github.com/mattermost/mattermost-server

Mattermost failed to disallow the modification of local users when syncing users in shared channels in github.com/mattermost/mattermost-server...

SUSE CVE-1999-0342

Linux PAM modules allow local users to gain root access using temporary files...

SUSE CVE-1999-0812

Race condition in Samba smbmnt allows local users to mount file systems in arbitrary locations...

CVE-2024-36492 Existing local user overwritten by malicious remote

Mattermost versions 9.9.x = 9.9.0, 9.5.x = 9.5.6, 9.7.x = 9.7.5, 9.8.x = 9.8.1 fail to disallow the modification of local users when syncing users in shared channels. which allows a malicious remote to overwrite an existing local user...

Mattermost 安全漏洞

Mattermost is an open source collaboration platform from Mattermost, Inc. in the United States. Mattermost suffers from a security vulnerability that stems from a failure to disable modification of local users when synchronizing users in a shared channel. An attacker could use the vulnerability t...

CVE-2024-27358

An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service DoS...

CVE-2024-27358

An issue was discovered in WithSecure Elements Agent through 23.x for macOS and WithSecure Elements Client Security through 23.x for macOS. Local users can block an admin from completing an installation, aka a Denial-of-Service DoS...

CVE-2024-27358

A security vulnerability exists in WithSecure Elements Agent and WithSecure Elements Client Security (versions through 23.x ) for macOS . The issue allows local users to block an administrator from completing an installation, resulting in a Denial-of-Service (DoS) . To remediate this, users shoul...

kernel: vmwgfx: use-after-free in vmw_cmd_res_check

A use-after-free vulnerability was found in the Linux kernel's vmwgfx driver in vmwcmdrescheck. This flaw allows a local, unprivileged attacker with access to either /dev/dri/card0 or /dev/dri/rendererD128, who can issue an ioctl on the resulting file descriptor, to crash the system, causing a...

Zoom Workplace Security Vulnerability

Zoom Workplace is a desktop application from Zoom USA. A security vulnerability exists in Zoom Workplace that stems from improper input validation in the desktop application installer could allow an authenticated user to perform a denial of service via local access...

PT-2024-22642 · Toshiba · Sharp/Toshiba Tec Mfps

Name of the Vulnerable Software and Affected Versions: Sharp/Toshiba Tec MFPs affected versions not specified Description: The issue allows any local user of the device to examine coredump files, which are stored with world-readable permission when the device crashes. This enables the user to...

CVE-2024-38531

Nix is a package manager for Linux and other Unix systems that makes package management reliable and reproducible. A build process has access to and can change the permissions of the build directory. After creating a setuid binary in a globally accessible location, a malicious local user can assu...

CVE-2024-22385

Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read and write specific files.This issue affects Hitachi Storage Provider for VMware vCenter: from 3.1.0 before 3.7.4...

CVE-2024-22385 File and Directory Permission Vulnerability in Hitachi Storage Provider for VMware vCenter

Incorrect Default Permissions vulnerability in Hitachi Storage Provider for VMware vCenter allows local users to read and write specific files.This issue affects Hitachi Storage Provider for VMware vCenter: from 3.1.0 before 3.7.4...