CVE-2024-39825 Zoom Workplace Apps and Rooms Clients - Buffer Overflow

Buffer overflow in some Zoom Workplace Apps and Rooms Clients may allow an authenticated user to conduct an escalation of privilege via network access...

CVE-2024-39825

CVE-2024-39825 affects Zoom Workplace Apps and Rooms Clients. The issue is a heap-based buffer overflow that can allow an authenticated, remote attacker to escalate privileges over the network. Exploitation context: network access; no user interaction required; impact reported as high for confide...

Security Bulletin: IBM WebSphere Application Server is vulnerable to an information disclosure (CVE-2023-50315)

Summary IBM WebSphere Application Server is vulnerable to an information disclosure. Vulnerability Details CVEID:CVE-2023-50315 DESCRIPTION: IBM WebSphere Application Server could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerabilit...

Security Bulletin: IBM WebSphere Application Server Liberty is vulnerable to information disclosure (CVE-2023-50314)

Summary IBM WebSphere Application Server Liberty is vulnerable to information disclosure. Vulnerability Details CVEID:CVE-2023-50314 DESCRIPTION: IBM WebSphere Application Server Liberty could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this...

CVE-2024-23499

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-38655

Improper buffer restrictions in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable denial of service via network access...

CVE-2024-23499

Protection mechanism failure in Linux kernel mode driver for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2024-24983

Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-38655

Improper buffer restrictions in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-38655

Improper buffer restrictions in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable denial of service via network access...

CVE-2023-38655

CVE-2023-38655 concerns improper buffer restrictions in firmware for Intel® AMT and Intel® Standard Manageability. The vulnerability could allow a privileged attacker to cause a denial of service over the network. Connected sources corroborate the issue within Intel chipset firmware/CSME/AMT ecos...

K10438187: BIG-IP iControl REST vulnerability CVE-2024-41723

Security Advisory Description Undisclosed requests to BIG-IP iControl REST can lead to an information leak of user account names. CVE-2024-41723 Impact This vulnerability allows for a remote authenticated attacker with network access to the iControl REST interface, through the BIG-IP management...

PT-2024-29943

Name of the Vulnerable Software and Affected Versions Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers affected versions not specified Description The issue allows a privileged user to conduct an information disclosure via network access. This affects some Zoom Workplace Apps, SDKs...

CVE-2024-39824: Missing Authorization

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access...

CVE-2023-50314: Improper Certificate Validation

IBM WebSphere Application Server Liberty 17.0.0.3 through 24.0.0.8 could allow an attacker with access to the network to conduct spoofing attacks. An attacker could exploit this vulnerability using a certificate issued by a trusted authority to obtain sensitive information. IBM X-Force ID: 274713...

CVE-2023-38655: DEPRECATED: Improper Sanitization of Custom Special Characters

Improper buffer restrictions in firmware for some IntelR AMT and IntelR Standard Manageability may allow a privileged user to potentially enable denial of service via network access...

CVE-2024-39818: Insufficiently Protected Credentials

Protection mechanism failure for some Zoom Workplace Apps and SDKs may allow an authenticated user to conduct information disclosure via network access...

CVE-2024-42434: Missing Authorization

Missing authorization in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access...

CVE-2024-42435: Exposure of Sensitive Information to an Unauthorized Actor

Sensitive information disclosure in some Zoom Workplace Apps, SDKs, Rooms Clients, and Rooms Controllers may allow a privileged user to conduct an information disclosure via network access...

CVE-2024-24983: Protection Mechanism Failure

Protection mechanism failure in firmware for some IntelR Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access...