GHSA-CWQ6-MJMX-47P6 XWiki's scheduler in subwiki allows scheduling operations for any main wiki user

Impact Any user with an account on the main wiki could run scheduling operations on subwikis. To reproduce, as a user on the main wiki without any special right, view the document Scheduler.WebHome in a subwiki. Then, click on any operation e.g., Trigger on any job. If the operation is successful...

CVE-2024-55876 XWiki's scheduler in subwiki allows scheduling operations for any main wiki user

XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on the main wiki could run scheduling operations on subwikis. To reproduce, as a user on the main wiki without any special right, view the document...

CVE-2024-55876 XWiki's scheduler in subwiki allows scheduling operations for any main wiki user

XWiki Platform is a generic wiki platform. Starting in version 1.2-milestone-2 and prior to versions 15.10.9 and 16.3.0, any user with an account on the main wiki could run scheduling operations on subwikis. To reproduce, as a user on the main wiki without any special right, view the document...

CVE-2024-49072

Windows Task Scheduler Elevation of Privilege Vulnerability...

CVE-2024-49072

Windows Task Scheduler Elevation of Privilege Vulnerability...

The vulnerability of the Windows Task Scheduler, a scheduling tool for operating systems, allows a malicious individual to exploit their elevated privileges.

The vulnerability of the Windows Task Scheduler, a task scheduling tool for Windows operating systems, is related to buffer overflows in dynamic memory. Exploiting this vulnerability can allow an attacker to gain elevated privileges...

CVE-2024-49072 Windows Task Scheduler Elevation of Privilege Vulnerability

...

CVE-2024-49072 Windows Task Scheduler Elevation of Privilege Vulnerability

...

CVE-2024-49072

Technical details about CVE-2024-49072 are not publicly available in the provided documents. Monitor for updates from official advisories; no covered exploit specifics, affected products, versions, or mitigations are provided here.

Windows Task Scheduler Elevation of Privilege Vulnerability

...

Microsoft Windows Task Scheduler 安全漏洞

Microsoft Windows Task Scheduler is an automation tool from Microsoft Corporation USA that allows users to automate scheduled tasks when specific conditions are met. A security vulnerability exists in Microsoft Windows Task Scheduler. An attacker could exploit the vulnerability to elevate...

PT-2024-9324 · Microsoft · Windows Task Scheduler +1

Name of the Vulnerable Software and Affected Versions: Windows Task Scheduler affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in the Windows Task Scheduler. It is associated with a buffer overflow in dynamic memory. Exploitation of this...

IBM Workload Scheduler Information Disclosure Vulnerability

IBM Workload Scheduler is a suite of enterprise task scheduling software from International Business Machines IBM. The software automates the control of workloads. An information disclosure vulnerability exists in IBM Workload Scheduler versions 9.5, 10.1, and 10.2, which stems from storing user...

About Elevation of Privilege – Windows Task Scheduler (CVE-2024-49039) vulnerability

About Elevation of Privilege - Windows Task Scheduler CVE-2024-49039 vulnerability. It was released on November Microsoft Patch Tuesday and showed signs of exploitation in the wild right away. To exploit the vulnerability, an authenticated attacker runs a specially crafted application on the targ...

CVE-2018-9354

In VideoFrameScheduler.cpp of VideoFrameScheduler::PLL::fit, there is a possible remote denial of service due to divide by 0. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. A security vulnerability exists in Google Android that stems from a divide-by-zero error in the VideoFrameScheduler::PLL::fit method in the VideoFrameScheduler.cpp file, which could lead to a remote denial of service. No...

PT-2024-10640 · Unknown · Videoframescheduler

Name of the Vulnerable Software and Affected Versions: VideoFrameScheduler affected versions not specified Description: The issue is related to a possible remote denial of service due to a divide by 0 error in the VideoFrameScheduler::PLL::fit function in VideoFrameScheduler.cpp. This could lead ...

CVE-2024-49351

IBM Workload Scheduler 9.5, 10.1, and 10.2 stores user credentials in plain text which can be read by a local user...

CVE-2024-49351

IBM Workload Scheduler 9.5, 10.1, and 10.2 stores user credentials in plain text which can be read by a local user...

CVE-2024-49351

IBM Workload Scheduler (versions 9.5, 10.1, 10.2) stores user credentials in plaintext, readable by a local user. This yields a CVSSv3.1 base score of 5.5 (LO: Local, PR:L, C:H, I:N, A:N). The issue stems from plaintext password storage; remediation is to upgrade to fixed releases: 9.5.0.7, 10.1....