Microsoft Project 输入验证错误漏洞

Microsoft Project is a suite of project management software from Microsoft USA. The software is used to assist project managers in developing plans, assigning resources to tasks, tracking progress, managing budgets, and analyzing workloads. An input validation error vulnerability exists in...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows Common Log File System Driver 输入验证错误漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. An...

Microsoft Azure Stack 输入验证错误漏洞

Microsoft Azure Stack is a hybrid cloud computing software solution based on the Azure cloud platform from Microsoft Corporation USA. The product supports building and deploying hybrid applications. An input validation error vulnerability exists in Microsoft Azure Stack. An attacker can exploit t...

CVE-2023-28806 Signature validation error in DLL allows disabling anti-tampering protection

An Improper Validation of signature in Zscaler Client Connector on Windows allows an authenticated user to disable anti-tampering. This issue affects Client Connector on Windows 4.2.0.190...

JFrog Artifactory 输入验证错误漏洞

JFrog Artifactory is a solution from JFrog for managing and delivering binaries in the software supply chain. An input validation error vulnerability exists in JFrog Artifactory that stems from vulnerability to incorrect input validation, which can lead to cache poisoning...

Siemens Omnivise T3000 输入验证错误漏洞

The Omnivise T3000 is a distributed control system for fossil fuel and large renewable energy power plants. An improper input validation vulnerability exists in the Siemens Omnivise T3000 Application Server due to an affected system exposing an internal application port on a public network...

Changing TCBServiSign 输入验证错误漏洞

Changing TCBServiSign is a cross-platform security control component from Changing, China. An input validation error vulnerability exists in versions prior to Changing TCBServiSign 1.0.24.0318. The vulnerability stems from a specific API that does not properly validate server-side input, which...

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35169)

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from accepting characters that are not allowed by the HTTP field name and forwarding a...

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35170)

Apache Traffic Server ATS is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. Apache Traffic Server suffers from an input validation error vulnerability that stems from forwarding the tail end of an incorrectly formatted HTTP chunk to the origin server. ...

Apache Traffic Server Input Validation Error Vulnerability (CNVD-2024-35671)

Apache Traffic Server is the United States Apache Apache Foundation's set of scalable HTTP proxy and caching server. An input validation error vulnerability exists in Apache Traffic Server, which can be exploited by an attacker to cause a denial of service condition by sending a specially crafted...

CVE-2024-41083 netfs: Fix netfs_page_mkwrite() to check folio->mapping is valid

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix netfspagemkwrite to check folio-mapping is valid Fix netfspagemkwrite to check that folio-mapping is valid once it has taken the folio lock as filemappagemkwrite does. Without this, generic/247 occasionally oopses with...

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

CVE-2024-41143

CVE-2024-41143 is a vulnerability in SKYSEA Client View (Windows client) caused by an origin validation error in shared memory/data exchanges. Affected versions are 3.013.00 through 19.210.04e . If exploited by a user who can log in to the PC, an arbitrary process may execute with SYSTEM privileg...

CVE-2024-41143

Origin validation error vulnerability exists in SKYSEA Client View Ver.3.013.00 to Ver.19.210.04e. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows client is installed...

Multiple vulnerabilities in SKYSEA Client View

Overview SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 - CVE-2024-41139 Origin validation error in shared memory data exchanges CWE-3...

JVN#84326763: Multiple vulnerabilities in SKYSEA Client View

SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific process CWE-266 CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Base Score 7.8 CVE-2024-41139 Origin...

CVE-2024-41086: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: bcachefs: Fix sbfielddowngrade validation - bch2sbdowngradevalidate wasn't checking for a downgrade entry extending past the end of the superblock section - foreachdowngradeentry is used in totext and needs to work on malformed...