Lucene search
+L

26074 matches found

OSV
OSV
added 2024/05/03 6:15 p.m.8 views

UBUNTU-CVE-2022-48705

In the Linux kernel, the following vulnerability has been resolved: wifi: mt76: mt7921e: fix crash in chip reset fail In case of drv own fail in reset, we may need to run macreset several times. The sequence would trigger system crash as the log below. Because we do not re-enable/schedule "txnapi...

5.5CVSS5.7AI score0.00193EPSS
SaveExploits0References5
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.9 views

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop that stems from a local privilege escalation vulnerability in the Updater service...

7.8CVSS7.6AI score0.00363EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2024/05/03 12:00 a.m.12 views

The vulnerability of the formIPMacBindModify() function (/goform/modifyIpMacBind) in the Tenda W15E router software allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the formIPMacBindBindModify function /goform/modifyIpMacBind of the Tenda W15E router software is related to the issue where the operation’s output goes beyond the buffer in memory when processing parameters such as IPMacBindRuleId, IPMacBindRuleIp, IPMacBindRuleMac, and...

9CVSS7.9AI score0.01684EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2024/05/03 12:00 a.m.8 views

Corel Parallels Desktop 安全漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Canada's Corel Digital Technology Corel. A security vulnerability exists in Corel Parallels Desktop that stems from a specific flaw in the updater service that can be abused to move arbitrary files by...

7.8CVSS7.7AI score0.00201EPSS
SaveExploits0References3
NVD
NVD
added 2024/05/02 1:23 p.m.25 views

CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

9.8CVSS6.8AI score0.00474EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/02 1:23 p.m.10 views

CVE-2024-23459

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

9.8CVSS5.8AI score0.00474EPSS
SaveExploits0References1
NVD
NVD
added 2024/05/02 1:23 p.m.23 views

CVE-2023-28798

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution...

9.8CVSS6.9AI score0.00435EPSS
SaveExploits0References1
OSV
OSV
added 2024/05/02 1:23 p.m.8 views

CVE-2023-28798

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution...

9.8CVSS6AI score0.00435EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/02 1:11 p.m.30 views

CVE-2024-23462 ZCC Mac validinstaller file integrity check missing

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...

3.3CVSS4.5AI score0.00191EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/02 1:11 p.m.11 views

CVE-2024-23462 ZCC Mac validinstaller file integrity check missing

An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4...

3.3CVSS7AI score0.00191EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/05/02 1:11 p.m.37 views

CVE-2024-23459 Multiple Arbitrary Creates/Overwrites by link following

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

7.1CVSS7.1AI score0.00474EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/02 1:11 p.m.73 views

CVE-2024-23459

CVE-2024-23459 affects Zscaler Client Connector on macOS prior to 3.7. It is an Improp er Link Resolution Before File Access (Link Following) vulnerability that allows overwriting a system file. Root cause cited: incorrect link resolution before file access. Impact described in the sources as hig...

9.8CVSS6.7AI score0.00474EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/05/02 1:11 p.m.25 views

CVE-2024-23459 Multiple Arbitrary Creates/Overwrites by link following

An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...

7.1CVSS6.8AI score0.00474EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/05/02 1:10 p.m.18 views

CVE-2023-28798 Out-of-bounds write to heap in pacparser

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution...

6.5CVSS7.8AI score0.00435EPSS
SaveExploits0References1
CVE
CVE
added 2024/05/02 1:10 p.m.67 views

CVE-2023-28798

CVE-2023-28798 relates to Zscaler Client Connector on macOS, where the pacparser library contains an out-of-bounds write to the heap in a way that may lead to arbitrary code execution. Affected software is Zscaler Client Connector (Mac) using pacparser; root cause is a heap out-of-bounds write. P...

9.8CVSS7.7AI score0.00435EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2024/05/02 1:10 p.m.33 views

CVE-2023-28798 Out-of-bounds write to heap in pacparser

An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution...

6.5CVSS7.2AI score0.00435EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/05/02 12:00 a.m.13 views

PT-2024-12177 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector affected versions not specified Description: An out-of-bounds write to heap in the pacparser library on Zscaler Client Connector on Mac may lead to arbitrary code execution. Recommendations: At the moment, there is no...

6.5CVSS7.6AI score0.00435EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2024/05/02 12:00 a.m.12 views

PT-2024-19884 · Zscaler · Zscaler Client Connector

Name of the Vulnerable Software and Affected Versions: Zscaler Client Connector on MacOS versions prior to 3.4 Description: An issue with improper validation of integrity check values in the upgrade process may allow local execution of code. This issue is related to the Zscaler Client Connector o...

4.2CVSS7.1AI score0.0011EPSS
SaveExploits0References4
OpenVAS
OpenVAS
added 2024/05/02 12:00 a.m.32 views

Google Chrome Security Update (stable-channel-update-for-desktop_30-2024-04) - MAC OS X

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

8.8CVSS8.7AI score0.01239EPSS
SaveExploits2References1
OSV
OSV
added 2024/05/01 6:15 a.m.13 views

UBUNTU-CVE-2024-26961

In the Linux kernel, the following vulnerability has been resolved: mac802154: fix llsec key resources release in mac802154llseckeydel mac802154llseckeydel can free resources of a key directly without following the RCU rules for waiting before the end of a grace period. This may lead to...

7.8CVSS6.2AI score0.0024EPSS
SaveExploits0References23
Rows per page
Query Builder