Zoom Client Security Vulnerability

Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client that originates from an error in business logic that could lead to the disclosure of sensitive information...

Cisco Secure Endpoint DoS (cisco-sa-clamav-dos-FTkhqMWZ)

A vulnerability in the Cisco Secure Endpoint AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could explo...

CVE-2024-24699

CVE-2024-24699 affects Zoom clients via a business logic error that can disclose information to an authenticated user over the network. The base score is 6.5 (MEDIUM) with high confidentiality impact and no integrity/availability impact. Connected sources confirm this affects Zoom Client for Meet...

CVE-2024-24699 Zoom Clients - Business Logic Error

Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-24699 Zoom Clients - Business Logic Error

Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access...

PT-2024-2683 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom affected versions not specified Description: The issue is related to a business logic error in Zoom's meeting chat component, which is associated with incorrect handling of logical operations. This error may allow a remote attacker to...

ASB-A-300741186

In removePersistentDot of SystemStatusAnimationSchedulerImpl.kt, there is a possible race condition due to a logic error in the code. This could lead to local escalation of privilege that fails to remove the persistent dot with no additional execution privileges needed. User interaction is not...

ASB-A-279055389

In multiple files, there is a possible way that trimmed content could be included in PDF output due to a logic error in the code. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-304082474

In startInstall of UpdateFetcher.java, there is a possible way to trigger a malicious config update due to a logic error. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-305664128

In multiple files, there is a possible way to capture the device screen when disallowed by device policy due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

ASB-A-230492947

In startNextMatchingActivity of ActivityTaskManagerService.java, there is a possible way to bypass the restrictions on starting activities from the background due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges needed. User...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

RHCOS 4 : OpenShift Container Platform 4.12.9 (RHSA-2023:1408)

The remote Red Hat Enterprise Linux CoreOS 4 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2023:1408 advisory. - capnproto: out of bounds read when handling a list of lists. CVE-2022-46149 Note that Nessus has not tested for this issue but has instead...

CVE-2023-48353

In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...

CVE-2023-48353

CVE-2023-48353 affects the vsp driver (UNISOC chipsets). A logic error can cause a use-after-free in the driver, leading to local denial of service with SYSTEM execution privileges required. CVSS 3.1/3.1 indicates LOCAL access, HIGH privileges, and an Availability impact. Public details describe ...

CVE-2023-48353

In vsp driver, there is a possible use after free due to a logic error. This could lead to local denial of service with System execution privileges needed...

PT-2024-13598 · Unknown · Vsp Driver

Name of the Vulnerable Software and Affected Versions: vsp driver affected versions not specified Description: The issue is related to a logic error in the vsp driver, which can cause a use after free condition. This could lead to a local denial of service and requires System execution privileges...

EulerOS Virtualization 3.0.2.2 : kernel (EulerOS-SA-2023-1262)

According to the versions of the kernel packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - In doepollctl and eploopcheckproc of eventpoll.c, there is a possible use after free due to a logic error. This could lead to loc...

GHSA-625G-FM5W-W7W4 Froxlor username/surname AND company field Bypass

Dear Sirs and Madams, I would like to report a business logic error vulnerability that I discovered during my recent penetration test on Froxlor. Specifically, I identified an issue where it was possible to submit the registration form with the essential fields, such as the username and password,...

Froxlor username/surname AND company field Bypass

Dear Sirs and Madams, I would like to report a business logic error vulnerability that I discovered during my recent penetration test on Froxlor. Specifically, I identified an issue where it was possible to submit the registration form with the essential fields, such as the username and password,...