Lucene search
+L

6105 matches found

osv_debian
osv_debian
•added 2023/11/01 8:15 p.m.•18 views

DEBIAN-CVE-2023-1193

A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...

6.5CVSS6.3AI score0.01047EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2023/11/01 8:15 p.m.•20 views

AZL-31851 CVE-2023-1193 affecting package kernel for versions less than 5.15.143.1-1

A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...

6.5CVSS5.7AI score0.01047EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2023/11/01 8:15 p.m.•16 views

UBUNTU-CVE-2023-1193

A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...

6.5CVSS6.7AI score0.01047EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2023/11/01 7:10 p.m.•90 views

CVE-2023-1193

A use-after-free flaw was found in setupasyncwork in the KSMBD implementation of the in-kernel samba server and CIFS in the Linux kernel. This issue could allow an attacker to crash the system by accessing freed work...

6.5CVSS7.8AI score0.01047EPSS
SaveExploits0
Amazon
Amazon
•added 2023/11/01 12:00 a.m.•12 views

Medium: kernel

Issue Overview: A flaw in the kernel Xen event handler can cause a deadlock with Xen console handling in unprivileged Xen guests. CVE-2023-34324 In the Linux kernel, the following vulnerability has been resolved: usb: hub: Guard against accesses to uninitialized BOS descriptors CVE-2023-52477 In...

7.1CVSS6AI score0.01152EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2023/10/23 7:00 a.m.•24 views

HTTP/2 rapid reset can cause excessive work in net/http

...

7.5CVSS6.2AI score0.03796EPSS
SaveExploits0
attackerkb
attackerkb
•added 2023/10/17 4:15 p.m.•13 views

CVE-2023-27133

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILESX86%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remot...

9.8CVSS7.2AI score0.05488EPSS
SaveExploits8References2
NVD
NVD
•added 2023/10/17 4:15 p.m.•56 views

CVE-2023-27133

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILESX86%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remot...

9.8CVSS9.5AI score0.00926EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/10/17 4:15 p.m.•23 views

CVE-2023-27133

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILESX86%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remot...

9.8CVSS7.3AI score0.00926EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2023/10/17 4:15 p.m.•20 views

CVE-2023-27132

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product...

9.8CVSS5.8AI score0.0106EPSS
SaveExploits1References1
NVD
NVD
•added 2023/10/17 4:15 p.m.•38 views

CVE-2023-27132

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product...

9.8CVSS9.7AI score0.0106EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/10/17 4:15 p.m.•9 views

CVE-2023-27132

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product...

9.8CVSS7.3AI score0.03686EPSS
SaveExploits4References2
Prion
Prion
•added 2023/10/17 4:15 p.m.•38 views

Privilege escalation

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILESX86%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remot...

7.5CVSS9.4AI score0.05488EPSS
SaveExploits8References1Affected Software1
Cvelist
Cvelist
•added 2023/10/17 12:00 a.m.•41 views

CVE-2023-27133

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILESX86%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remot...

9.7AI score0.00926EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/10/17 12:00 a.m.•25 views

PT-2023-20970 · Tsplus · Tsplus Remote Work

Name of the Vulnerable Software and Affected Versions: TSplus Remote Work version 16.0.0.0 Description: The issue concerns the storage of a cleartext password in the HTML source code of the secure single sign-on web portal. Specifically, the password is placed on the var pass line. Recommendation...

9.8CVSS9.5AI score0.0106EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/17 12:00 a.m.•9 views

CVE-2023-27133: Incorrect Default Permissions

TSplus Remote Work 16.0.0.0 has weak permissions for .exe, .js, and .html files under the %PROGRAMFILESX86%\TSplus-RemoteWork\Clients\www folder. This may enable privilege escalation if a different local user modifies a file. NOTE: CVE-2023-31067 and CVE-2023-31068 are only about the TSplus Remot...

9.8CVSS8.1AI score0.00926EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/10/17 12:00 a.m.•8 views

CVE-2023-27132: Insufficiently Protected Credentials

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product...

9.8CVSS8.2AI score0.0106EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2023/10/17 12:00 a.m.•65 views

CVE-2023-27132

TSplus Remote Work 16.0.0.0 places a cleartext password on the "var pass" line of the HTML source code for the secure single sign-on web portal. NOTE: CVE-2023-31069 is only about the TSplus Remote Access product, not the TSplus Remote Work product...

9.9AI score0.0106EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/10/17 12:00 a.m.•16 views

PT-2023-20971 · Tsplus · Tsplus Remote Work

Name of the Vulnerable Software and Affected Versions: TSplus Remote Work version 16.0.0.0 Description: The issue is related to weak permissions for certain file types, including .exe, .js, and .html files, located under the %PROGRAMFILESX86%TSplus-RemoteWorkClientswww folder. This weakness may...

9.8CVSS9.5AI score0.00926EPSS
SaveExploits1References6
CNNVD
CNNVD
•added 2023/10/17 12:00 a.m.•20 views

TSplus Security Vulnerabilities

TSplus is a remote access software software from TSplus. A security vulnerability exists in TSplus Remote Work version 16.0.0.0, which originates from setting insecure file and folder permissions that could allow a malicious user to manipulate the contents of a file or change a legitimate file in...

9.8CVSS6.9AI score0.00926EPSS
SaveExploits1References2
Rows per page
Query Builder