2577 matches found
zookeeper: Authorization Bypass in Apache ZooKeeper
A flaw was found in Apache ZooKeeper. Authorization bypass through user-controlled key is available iff SASL Quorum Peer authentication is enabled in ZooKeeper via quorum.auth.enableSasl=true configuration. A malicious user could bypass the authentication controller by using a non-existing instan...
Zephyr Security Breach
Zephyr is an extensible real-time operating system RTOS open-sourced by the Zephyr Project. A security vulnerability exists in Zephyr 3.5.0 and earlier versions, which stems from an improper privilege checking issue that could allow an attacker to perform read or write operations...
CVE-2024-20949
Vulnerability in the Oracle Customer Interaction History product of Oracle E-Business Suite component: Outcome-Result. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Custom...
Adobe Substance 3D Painter 缓冲区错误漏洞
Adobe Substance 3D Painter is a 3D texturing application from the American company Audobee Adobe. A buffer overflow vulnerability exists in Adobe Substance 3D Painter version 9.1.1 and prior versions, which stems from the presence of a write-anywhere vulnerability that could lead to the execution...
CVE-2024-22226
Dell Unity, versions prior to 5.4, contain a path traversal vulnerability in its svcsupportassist utility. An authenticated attacker could potentially exploit this vulnerability, to gain unauthorized write access to the files stored on the server filesystem, with elevated privileges...
Path traversal
A vulnerability, which was classified as problematic, was found in KDE Plasma Workspace up to 5.93.0. This affects the function EventPluginsManager::enabledPlugins of the file components/calendar/eventpluginsmanager.cpp of the component Theme File Handler. The manipulation of the argument pluginI...
zookeeper: Authorization Bypass in Apache ZooKeeper
A flaw was found in Apache ZooKeeper. Authorization bypass through user-controlled key is available iff SASL Quorum Peer authentication is enabled in ZooKeeper via quorum.auth.enableSasl=true configuration. A malicious user could bypass the authentication controller by using a non-existing instan...
CVE-2024-20948
Vulnerability in the Oracle Knowledge Management product of Oracle E-Business Suite component: Setup, Admin. Supported versions that are affected are 12.2.3-12.2.13. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Knowledge...
EulerOS 2.0 SP8 : git (EulerOS-SA-2023-3127)
According to the versions of the git packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38.5, 2.39.3, and 2.40.1, by...
PT-2024-1450 · Unknown · Rapid Scada
Name of the Vulnerable Software and Affected Versions: Rapid SCADA versions prior to 5.8.4 Description: The issue is related to incorrect permission assignment for a critical resource in the SCADA system. This may allow an attacker to escalate their privileges. An authorized user can write direct...
VulnCheck KEV: CVE-2022-48618
Apple iOS, iPadOS, macOS, tvOS, and watchOS contain a time-of-check/time-of-use TOCTOU memory corruption vulnerability that allows an attacker with read and write capabilities to bypass Pointer Authentication...
PT-2024-2793 · Dell · Dell Unity
Name of the Vulnerable Software and Affected Versions: Dell Unity versions prior to 5.4 Description: The issue is related to a path traversal vulnerability in the svc supportassist utility of Dell Unity. An authenticated attacker could potentially exploit this vulnerability to gain unauthorized...
DEBIAN-CVE-2024-21633
Apktool is a tool for reverse engineering Android APK files. In versions 2.9.1 and prior, Apktool infers resource files' output path according to their resource names which can be manipulated by attacker to place files at desired location on the system Apktool runs on. Affected environments are...
PT-2024-1051 · Apktool +1 · Apktool +1
Name of the Vulnerable Software and Affected Versions: Apktool versions 2.9.1 and prior Description: The issue is related to incorrect restriction of the directory path name with limited access. An attacker can exploit this to write or overwrite arbitrary data. Apktool infers resource files' outp...
OESA-2023-1986 hdf5 security update
HDF5 is a data model, library, and file format for storing and managing data. It supports an unlimited variety of datatypes, and is designed for flexible and efficient I/O and for high volume and complex data. HDF5 is portable and is extensible, allowing applications to evolve in their use of HDF...
CVE-2023-52174
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...
CVE-2023-52174
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3125D6...
CVE-2023-52173
XnView Classic before 2.51.3 on Windows has a Write Access Violation at xnview.exe+0x3ADBD0...