Dell Mobility - E-Lab Navigator, version(s) 3.1.9, 3.2.0, contain(s) an Authorization Bypass Through User-Controlled Key vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Launch of phishing attacks.
AFFECTED_PRODUCTS:
Dell E Lab Navigator,
Dell E Lab Navigator
Digdag is an open source tool that to build, run, schedule, and monitor complex pipelines of tasks across various platforms. Treasure Data's digdag workload automation system is susceptible to a path traversal vulnerability if it's configured to store log files locally. This issue may lead to inform...
AFFECTED_PRODUCTS:
Treasuredata Digdag
Business logic error in some Zoom clients may allow an authenticated user to conduct information disclosure via network access.
AFFECTED_PRODUCTS:
Zoom Zoom,
Zoom Rooms,
Zoom Vdi Windows Meeting Clients
... (+3)
Improper authentication in some Zoom clients may allow a privileged user to conduct a disclosure of information via local access.
AFFECTED_PRODUCTS:
Zoom Zoom,
Zoom Rooms,
Zoom Vdi Windows Meeting Clients
... (+3)
Untrusted search path in some Zoom 32 bit Windows clients may allow an authenticated user to conduct an escalation of privilege via local access.
AFFECTED_PRODUCTS:
Zoom Zoom,
Zoom Rooms,
Zoom Vdi Windows Meeting Clients
... (+3)
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.
AFFECTED_PRODUCTS:
Zoom Zoom,
Zoom Vdi Windows Meeting Clients,
Zoom Vdi Windows Meeting Clients
... (+2)
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an authenticated user to conduct a disclosure of information via network access.
AFFECTED_PRODUCTS:
Zoom Zoom,
Zoom Vdi Windows Meeting Clients,
Zoom Vdi Windows Meeting Clients
... (+2)
Improper input validation in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom Meeting SDK for Windows may allow an unauthenticated user to conduct an escalation of privilege via network access.
AFFECTED_PRODUCTS:
Zoom Zoom,
Zoom Rooms,
Zoom Vdi Windows Meeting Clients
... (+3)
Improper input validation in some Zoom clients may allow an authenticated user to conduct a denial of service via network access.
AFFECTED_PRODUCTS:
Zoom Zoom,
Zoom Rooms,
Zoom Vdi Windows Meeting Clients
... (+4)
A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the `parent` or `plugin` keywords. This could download a malicious archive and cause the cleanup process to overwrite...
AFFECTED_PRODUCTS:
Red Hat Openshift,
Devfile Registry Support
TYPO3 is an open source PHP based web content management system released under the GNU GPL. In affected versions of TYPO3 entities of the File Abstraction Layer (FAL) could be persisted directly via `DataHandler`. This allowed attackers to reference files in the fallback storage directly and retriev...
AFFECTED_PRODUCTS:
Typo3 Typo3,
Typo3 Typo3,
Typo3 Typo3
... (+3)
TYPO3 is an open source PHP based web content management system released under the GNU GPL. The TYPO3-specific `t3://` URI scheme could be used to access resources outside of the users' permission scope. This encompassed files, folders, pages, and records (although only if a valid link-handling conf...
AFFECTED_PRODUCTS:
Typo3 Typo3,
Typo3 Typo3,
Typo3 Typo3
... (+3)
TYPO3 is an open source PHP based web content management system released under the GNU GPL. The plaintext value of `$GLOBALS['SYS']['encryptionKey']` was displayed in the editing forms of the TYPO3 Install Tool user interface. This allowed attackers to utilize the value to generate cryptographic has...
AFFECTED_PRODUCTS:
Typo3 Typo3,
Typo3 Typo3,
Typo3 Typo3
... (+3)
TYPO3 is an open source PHP based web content management system released under the GNU GPL. Password hashes were being reflected in the editing forms of the TYPO3 backend user interface. This allowed attackers to crack the plaintext password using brute force techniques. Exploiting this vulnerabilit...
AFFECTED_PRODUCTS:
Typo3 Typo3,
Typo3 Typo3,
Typo3 Typo3
... (+3)
Insecure Permissions issue in Raiden Professional Server RaidenFTPD v.2.4 build 4005 allows a local attacker to gain privileges and execute arbitrary code via crafted executable running from the installation directory.
AFFECTED_PRODUCTS:
Raidenftpd Raidenftpd
A user changing their email after signing up and verifying it can change it without verification in profile settings.
The configuration option "verify_email_enabled" will only validate email only on sign up.
AFFECTED_PRODUCTS:
Grafana Grafana,
Grafana Grafana,
Grafana Grafana
... (+2)
Sourcecodester School Task Manager 1.0 allows SQL Injection via the 'subject' parameter.
AFFECTED_PRODUCTS:
Rems School Task Manager
Due to a code bug in
Secure_TSC, SEV firmware may allow an attacker with high privileges to cause a
guest to observe an incorrect TSC when Secure TSC is enabled potentially
resulting in a loss of guest integrity.
AFFECTED_PRODUCTS:
AMD Epyc 72f3 Firmware,
AMD Epyc 7313 Firmware,
AMD Epyc 7313p Firmware
... (+58)
Failure to initialize
memory in SEV Firmware may allow a privileged attacker to access stale data
from other guests.
AFFECTED_PRODUCTS:
AMD Epyc 72f3 Firmware,
AMD Epyc 7313 Firmware,
AMD Epyc 7313p Firmware
... (+59)
Improper
Access Control in System Management Mode (SMM) may allow an attacker access to
the SPI flash potentially leading to arbitrary code execution.
Improper
Access Control in the AMD SPI protection feature may allow a user with Ring0
(kernel mode) privileged access to bypass protections potentially resulting in
loss of integrity and availability.
AFFECTED_PRODUCTS:
AMD Ryzen 3 5300ge Firmware,
AMD Ryzen 3 5300g Firmware,
AMD Ryzen 5 5600ge Firmware
... (+126)
Insufficient checking of memory buffer in ASP
Secure OS may allow an attacker with a malicious TA to read/write to the ASP
Secure OS kernel virtual address space potentially leading to privilege
escalation.
AFFECTED_PRODUCTS:
AMD Ryzen Embedded 5950e Firmware,
AMD Ryzen Embedded 5900e Firmware,
AMD Ryzen Embedded 5800e Firmware
... (+7)
sidekiq-unique-jobs is an open source project which prevents simultaneous Sidekiq jobs with the same unique arguments to run. Specially crafted GET request parameters handled by any of the following endpoints of sidekiq-unique-jobs' "admin" web UI, allow a super-user attacker, or an unwitting, but a...
AFFECTED_PRODUCTS:
Mhenrixon Sidekiq Unique Jobs,
Mhenrixon Sidekiq Unique Jobs
mod_auth_openidc is an OpenID Certified™ authentication and authorization module for the Apache 2.x HTTP server that implements the OpenID Connect Relying Party functionality. In affected versions missing input validation on mod_auth_openidc_session_chunks cookie value makes the server vulnerable to...
AFFECTED_PRODUCTS:
Debian Debian Linux,
Fedoraproject Fedora,
Openidc Mod Auth Openidc
sf_event_mgt is an event management and registration extension for the TYPO3 CMS based on ExtBase and Fluid. In affected versions the existing access control check for events in the backend module got broken during the update of the extension to TYPO3 12.4, because the `RedirectResponse` from the `$...
AFFECTED_PRODUCTS:
Derhansen Event Management And Registration
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring SMTP options. Exploitation of this vulnerability required access to the G...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via nomad templates when configuring audit log forwarding. Exploitation of this vulnerability required access...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when configuring SAML settings. Exploitation of this vulnerability required access to the GitHub Enterprise Se...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting the username and password for collectd configurations. Exploitation of this vulnerability require...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance when setting up an HTTP proxy. Exploitation of this vulnerability required access to the GitHub Enterprise Ser...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the actions-console docker container while setting a service URL. Exploitation of this vulnerability requi...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
A command injection vulnerability was identified in GitHub Enterprise Server that allowed an attacker with an editor role in the Management Console to gain admin SSH access to the appliance via the `syslog-ng` configuration file. Exploitation of this vulnerability required access to the GitHub Enter...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Cross-site Scripting in the tag name pattern field in the tag protections UI in GitHub Enterprise Server allows a malicious website that requires user interaction and social engineering to make changes to a user account via CSP bypass with created CSRF tokens. This vulnerability affected all version...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an attacker to gain unauthorized read permission to files by deploying arbitrary symbolic links to a GitHub Pages site with a specially crafted artifact tarball. To exploit this vulnerability, an attacker would ne...
AFFECTED_PRODUCTS:
GitHub Enterprise Server,
GitHub Enterprise Server,
GitHub Enterprise Server
... (+1)
Microsoft WDAC OLE DB provider for SQL Server Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2019
... (+21)
Microsoft Outlook Remote Code Execution Vulnerability
AFFECTED_PRODUCTS:
Microsoft Office,
Microsoft Office,
Microsoft Office Long Term Servicing Channel
Internet Shortcut Files Security Feature Bypass Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2019,
Microsoft Windows 11 21h2,
Microsoft Windows Server 2022
... (+6)
Microsoft Exchange Server Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Exchange Server,
Microsoft Exchange Server
Windows Printing Service Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2012
... (+11)
Microsoft Message Queuing (MSMQ) Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Windows Server 2008,
Microsoft Windows Server 2012,
Microsoft Windows Server 2016
... (+11)
.NET Denial of Service Vulnerability
AFFECTED_PRODUCTS:
Microsoft Asp.net Core,
Microsoft Asp.net Core,
Microsoft Asp.net Core
... (+3)
Microsoft Azure Kubernetes Service Confidential Container Elevation of Privilege Vulnerability
Microsoft Outlook Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft 365 Apps
Microsoft Entra Jira Single-Sign-On Plugin Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Entra Jira Sso Plugin
Microsoft Azure File Sync Elevation of Privilege Vulnerability
AFFECTED_PRODUCTS:
Microsoft Azure File Sync,
Microsoft Azure File Sync
Dynamics 365 Sales Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Dynamics 365
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
AFFECTED_PRODUCTS:
Microsoft Dynamics 365
Dynamics 365 Field Service Spoofing Vulnerability
AFFECTED_PRODUCTS:
Microsoft Dynamics 365
Microsoft Dynamics 365 (on-premises) Cross-site Scripting Vulnerability
AFFECTED_PRODUCTS:
Microsoft Dynamics 365