Lucene search
+L

900 matches found

OSV
OSV
added 2024/03/12 8:15 a.m.4 views

CVE-2024-24964

Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows clie...

6.3CVSS5.8AI score0.00408EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/12 8:15 a.m.13 views

Improper access control

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is...

7.5AI score0.00236EPSS
SaveExploits0References2
Prion
Prion
added 2024/03/12 8:15 a.m.15 views

Improper access control

Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows clie...

7.1AI score0.00408EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/12 7:21 a.m.24 views

CVE-2024-24964

Improper access control vulnerability exists in the resident process of SKYSEA Client View versions from Ver.11.220 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary process may be executed with SYSTEM privilege by a user who can log in to the PC where the product's Windows clie...

6.8AI score0.00408EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2024/03/12 7:20 a.m.26 views

CVE-2024-21805

Improper access control vulnerability exists in the specific folder of SKYSEA Client View versions from Ver.16.100 prior to Ver.19.2. If this vulnerability is exploited, an arbitrary file may be placed in the specific folder by a user who can log in to the PC where the product's Windows client is...

7.1AI score0.00236EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2024/03/12 12:0 a.m.8 views

Microsoft ODBC Driver Security Vulnerability

Microsoft ODBC Driver is a driver from Microsoft. It allows applications to access data in a database management system DBMS using SQL as the standard for accessing data. A security vulnerability exists in Microsoft ODBC Driver. An attacker exploiting this vulnerability could remotely execute cod...

8.8CVSS7.3AI score0.01947EPSS
SaveExploits0References3
Japan Vulnerability Notes
Japan Vulnerability Notes
added 2024/03/07 7:9 a.m.32 views

Multiple vulnerabilities in SKYSEA Client View

Overview SKYSEA Client View provided by Sky Co.,LTD. is an Enterprise IT Asset Management Tool. SKYSEA Client View contains multiple vulnerabilities listed below. Improper access control in the specific folder CWE-276 - CVE-2024-21805 Improper access control in the resident process CWE-749 -...

7.8CVSS7.4AI score0.00408EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2024/03/05 12:0 a.m.27 views

CVE-2024-24278

An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function...

6.2AI score0.00708EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
added 2024/03/05 12:0 a.m.11 views

PT-2024-20335 · Teamwire · Teamwire Windows Desktop Client

Name of the Vulnerable Software and Affected Versions: Teamwire Windows desktop client versions 2.0.1 through 2.4.0 Description: An issue in the Teamwire Windows desktop client allows a remote attacker to obtain sensitive information via a crafted payload to the message function. Recommendations:...

7.5CVSS6AI score0.00708EPSS
SaveExploits1References6
OSV
OSV
added 2024/03/05 12:0 a.m.7 views

CVE-2024-24275

Cross Site Scripting vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the global search function...

9.6CVSS5.9AI score0.00869EPSS
SaveExploits1References3
CNNVD
CNNVD
added 2024/03/05 12:0 a.m.9 views

Grouptime Teamwire Client Security Vulnerability

Grouptime Teamwire Client is an enterprise messaging client application from Grouptime, Germany. A security vulnerability exists in the Teamwire Windows desktop client versions v.2.0.1 through v.2.4.0. A remote attacker could exploit the vulnerability to obtain sensitive information via a special...

9.6CVSS6.4AI score0.00869EPSS
SaveExploits1References2
OSV
OSV
added 2024/03/05 12:0 a.m.9 views

CVE-2024-24276

Cross Site Scripting XSS vulnerability in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the chat name, message preview, username and group name components...

9.6CVSS5.5AI score0.00869EPSS
SaveExploits1References3
OSV
OSV
added 2024/03/05 12:0 a.m.6 views

CVE-2024-24278

An issue in Teamwire Windows desktop client v.2.0.1 through v.2.4.0 allows a remote attacker to obtain sensitive information via a crafted payload to the message function...

7.5CVSS6.2AI score0.00708EPSS
SaveExploits1References3
OSV
OSV
added 2024/02/14 12:15 a.m.6 views

CVE-2024-24696

Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access...

6.5CVSS5.8AI score0.00803EPSS
SaveExploits0References1
Prion
Prion
added 2024/02/14 12:15 a.m.25 views

Privilege escalation

Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access...

3.4CVSS7.3AI score0.00273EPSS
SaveExploits0References1
Microsoft KB
Microsoft KB
added 2024/02/13 8:0 a.m.48 views

.NET 7.0 Update - February 13, 2024 (KB5035120)

None None...

7.5CVSS7AI score0.02707EPSS
SaveExploits0
Positive Technologies
Positive Technologies
added 2024/02/13 12:0 a.m.3 views

PT-2024-1719

Name of the Vulnerable Software and Affected Versions Zoom Desktop Client for Windows versions prior to 5.17.7 Zoom VDI Client for Windows versions prior to 5.16.10 excluding versions 5.14.14 and 5.15.12 Zoom Rooms for Windows versions prior to 5.17.0 Zoom Meeting SDK for Windows versions prior t...

10CVSS7AI score0.01689EPSS
SaveExploits0References60
CNNVD
CNNVD
added 2024/02/13 12:0 a.m.9 views

Microsoft WDAC OLE DB provider for SQL Security Vulnerability

Microsoft OLE DB Provider for SQL Server is an API from Microsoft Corporation that allows access to data from a variety of sources in a unified way. A security vulnerability exists in Microsoft WDAC OLE DB provider for SQL. The following products and editions are affected: Windows Server 2012...

8.8CVSS7.2AI score0.01768EPSS
SaveExploits0References3
Microsoft KB
Microsoft KB
added 2024/01/09 8:0 a.m.270 views

.NET 6.0 Update - January 09, 2024 (KB5033733)

None None...

9.8CVSS6.8AI score0.02895EPSS
SaveExploits0
CNNVD
CNNVD
added 2024/01/09 12:0 a.m.8 views

Microsoft Windows Kerberos Security Vulnerability

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation.Kerberos also serves as a network authentication protocol designed to provide strong authentication services to client/server applications via a key system. A security vulnerability exists i...

8.8CVSS6.8AI score0.17168EPSS
SaveExploits1References3
Rows per page
Query Builder