Windows Secure Kernel Mode Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2,
Microsoft Windows 10 22h2
... (+5)
Windows Kernel Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2,
Microsoft Windows 10 22h2
... (+3)
Windows DWM Core Library Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+7)
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Windows Telephony Service Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Microsoft Windows VMSwitch Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022,
Microsoft Windows 11 22h2,
Microsoft Windows 11 23h2
... (+3)
Windows Hyper-V Shared Virtual Disk Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+7)
Windows NT OS Kernel Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Windows Telephony Service Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Azure CycleCloud Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure Cyclecloud
LightGBM Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Lightgbm
Windows Update Stack Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022,
Microsoft Windows 10 21h2,
Microsoft Windows 10 22h2
... (+2)
.NET and Visual Studio Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Red Hat Red Hat Enterprise Linux 9
.NET and Visual Studio Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Red Hat Red Hat Enterprise Linux 9
SQL Server Native Client Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2016
... (+3)
SQL Server Native Client Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2016
... (+3)
Windows Registry Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows Server 2022,
Microsoft Windows 10 1809
... (+15)
NTLM Hash Disclosure Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Windows DNS Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+4)
Windows USB Video Class System Driver Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Windows SMBv3 Server Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2022
Microsoft Virtual Hard Disk (VHDX) Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows 11 22h2,
Microsoft Windows 11 23h2,
Microsoft Windows Server 2022 23h2
... (+2)
SQL Server Native Client Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Sql Server 2019,
Microsoft Sql Server 2019,
Microsoft Sql Server 2016
... (+3)
Windows Package Library Manager Information Disclosure Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+22)
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Ryzen Ai Software
Improper input validation in the NPU driver could allow an attacker to supply a specially crafted pointer potentially leading to arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Ryzen Ai Software
Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Provisioning Console
Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Management Console
Improper validation of user input in the NPU driver could allow an attacker to provide a buffer with unexpected size, potentially leading to system crash.
AFFECTED_PRODUCTS:
AMD Ryzen Ai Software
Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Ryzen Master Utility For Overclocking Control
Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Ryzen Master Monitoring Software Development Kit
Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Cloud Manageability Service
Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Management Plugin For Sccm
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
AFFECTED_PRODUCTS:
AMD Radeon Software,
AMD Radeon Software,
AMD Radeon Software
... (+1)
A vulnerability classified as problematic has been found in DedeCMS 5.7.116. This affects an unknown part of the file /dede/uploads/dede/friendlink_add.php. The manipulation of the argument logoimg leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been dis...
AFFECTED_PRODUCTS:
Dedecms Dedecms
In WS_FTP Server versions before 8.8.9 (2022.0.9), an Incorrect Implementation of Authentication Algorithm in the Web Transfer Module allows users to skip the second-factor verification and log in with username and password only.
A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.
AFFECTED_PRODUCTS:
Ivanti Secure Access Client,
Ivanti Secure Access Client
Incorrect permissions in Ivanti Secure Access Client before version 22.7R4 allows a local authenticated attacker to create arbitrary folders.
AFFECTED_PRODUCTS:
Ivanti Secure Access Client,
Ivanti Secure Access Client
Improper authorization in Ivanti Secure Access Client before version 22.7R3 allows a local authenticated attacker to modify sensitive configuration files.
AFFECTED_PRODUCTS:
Ivanti Secure Access Client,
Ivanti Secure Access Client
Incorrect permissions in Ivanti Secure Access Client before 22.7R4 allows a local authenticated attacker to escalate their privileges.
AFFECTED_PRODUCTS:
Ivanti Secure Access Client,
Ivanti Secure Access Client
Zoraxy is a general purpose HTTP reverse proxy and forwarding tool. A command injection vulnerability in the Web SSH feature allows an authenticated attacker to execute arbitrary commands as root on the host. Zoraxy has a Web SSH terminal feature that allows authenticated users to connect to SSH ser...
Element is a Matrix web client built using the Matrix React SDK. A malicious homeserver can send invalid messages over federation which can prevent Element Web and Desktop from rendering single messages or the entire room containing them. This was patched in Element Web and Desktop 1.11.85.
Element is a Matrix web client built using the Matrix React SDK. Versions of Element Web and Desktop earlier than 1.11.85 do not check if thumbnails for attachments, stickers and images are coherent. It is possible to add thumbnails to events trigger a file download once clicked. Fixed in element-we...
matrix-js-sdk is a Matrix messaging protocol Client-Server SDK for JavaScript. matrix-js-sdk before 34.11.0 is vulnerable to client-side path traversal via crafted MXC URIs. A malicious room member can trigger clients based on the matrix-js-sdk to issue arbitrary authenticated GET requests to the cl...
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds write vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file.
AFFECTED_PRODUCTS:
Adobe Animate,
Adobe Animate
Animate versions 23.0.7, 24.0.4 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victim m...
AFFECTED_PRODUCTS:
Adobe Animate,
Adobe Animate