27734 matches found
Design/Logic Flaw
When a virtual server is enabled with VLAN group and SNAT listener is configured, undisclosed traffic can cause the Traffic Management Microkernel TMM to terminate. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
Design/Logic Flaw
Incorrect default permissions in some ACAT software maintained by IntelR before version 2.0.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Uncontrolled search path in some IntelR oneAPI Toolkit and component software installers before version 4.3.2 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Uncontrolled search path in some IntelR Binary Configuration Tool software before version 3.4.4 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Protection mechanism failure in some IntelR OFU software before version 14.1.31 may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Uncontrolled search path in IntelR QSFP+ Configuration Utility software, all versions, may allow an authenticated user to potentially enable escalation of privilege via local access...
Design/Logic Flaw
Uncaught exception for some IntelR PROSet/Wireless and IntelR KillerTM Wi-Fi software before version 22.240 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2024-24699
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access...
CVE-2024-24699
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access...
Oracle Linux 8 / 9 : sudo (ELSA-2024-0811)
The remote Oracle Linux 8 / 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2024-0811 advisory. - CVE-2023-28487 sudo: Sudo does not escape control characters in sudoreplay output Resolves: RHEL-21834 - CVE-2023-28486 sudo: Sudo does not escap...
Zoom Client Security Vulnerability
Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in Zoom Client that originates from an error in business logic that could lead to the disclosure of sensitive information...
Cisco Secure Endpoint DoS (cisco-sa-clamav-dos-FTkhqMWZ)
A vulnerability in the Cisco Secure Endpoint AutoIt module of ClamAV could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due to a logic error in the memory management of an affected device. An attacker could explo...
CVE-2024-24699
CVE-2024-24699 affects Zoom clients via a business logic error that can disclose information to an authenticated user over the network. The base score is 6.5 (MEDIUM) with high confidentiality impact and no integrity/availability impact. Connected sources confirm this affects Zoom Client for Meet...
CVE-2024-24699 Zoom Clients - Business Logic Error
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access...
CVE-2024-24699 Zoom Clients - Business Logic Error
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access...
Design/Logic Flaw
Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute arbitrary code via crafted executable running from the installation directory...
Design/Logic Flaw
TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific t3:// URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records although only if a valid link-handling...
GHSA-68W7-72JG-6QPP NuGet Client Security Feature Bypass Vulnerability
Description Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 and .NET 8.0. This advisory also provides guidance on what developers can do to update their applications to address this vulnerability. A security feature bypass...
NuGet Client Security Feature Bypass Vulnerability
Description Microsoft is releasing this security advisory to provide information about a vulnerability in .NET 6.0, .NET 7.0 and .NET 8.0. This advisory also provides guidance on what developers can do to update their applications to address this vulnerability. A security feature bypass...
Design/Logic Flaw
Insufficient checking of memory buffer in ASP Secure OS may allow an attacker with a malicious TA to read/write to the ASP Secure OS kernel virtual address space potentially leading to privilege escalation...