In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2023.11.2 stored XSS via agent distribution was possible
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2023.11.2 access control at the S3 Artifact Storage plugin endpoint was missed
AFFECTED_PRODUCTS:
Jetbrains TeamCity
In JetBrains TeamCity before 2023.11.3 authentication bypass leading to RCE was possible
AFFECTED_PRODUCTS:
Jetbrains TeamCity
Malicious code execution via path traversal in Apache Software Foundation Apache Sling Servlets Resolver.This issue affects all version of Apache Sling Servlets Resolver before 2.11.0. However, whether a system is vulnerable to this attack depends on the exact configuration of the system.
If the sys...
AFFECTED_PRODUCTS:
Apache Sling Servlets Resolver
A default installation of RustDesk 1.2.3 on Windows places a WDKTestCert certificate under Trusted Root Certification Authorities with Enhanced Key Usage of Code Signing (1.3.6.1.5.5.7.3.3), valid from 2023 until 2033. This is potentially unwanted, e.g., because there is no public documentation of s...
AFFECTED_PRODUCTS:
Rustdesk Rustdesk
A flaw was found in the GNU coreutils "split" program. A heap overflow with user-controlled data of multiple hundred bytes in length could occur in the line_bytes_split() function, potentially leading to an application crash and denial of service.
AFFECTED_PRODUCTS:
GNU Coreutils,
GNU Coreutils,
GNU Coreutils
An improper initialization vulnerability was found in Galleon. When using Galleon to provision custom EAP or EAP-XP servers, the servers are created unsecured. This issue could allow an attacker to access remote HTTP services available from the server.
AFFECTED_PRODUCTS:
Red Hat Jboss Enterprise Application Platform
linux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.
AFFECTED_PRODUCTS:
Linux-Pam Linux Pam
Dell Encryption, Dell Endpoint Security Suite Enterprise, and Dell Security Management Server versions prior to 11.9.0 contain privilege escalation vulnerability due to improper ACL of the non-default installation directory. A local malicious user could potentially exploit this vulnerability by rep...
AFFECTED_PRODUCTS:
Dell Encryption,
Dell Endpoint Security Suite Enterprise,
Dell Security Management Server
Dell Display Manager application, version 2.1.1.17 and prior, contain an insecure operation on windows junction/mount point. A local malicious user could potentially exploit this vulnerability during installation leading to arbitrary folder or file deletion
AFFECTED_PRODUCTS:
Dell Display Manager
DUP framework version 4.9.4.36 and prior contains insecure operation on Windows junction/Mount point vulnerability. A local malicious standard user could exploit the vulnerability to create arbitrary files, leading to denial of service
AFFECTED_PRODUCTS:
Dell Update Package Framework
Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during installation and uninstallation
AFFECTED_PRODUCTS:
Dell Display Manager
Dell BIOS contains a Signed to Unsigned Conversion Error vulnerability. A local authenticated malicious user with admin privileges could potentially exploit this vulnerability, leading to denial of service.
Dell Data Protection Search 19.2.0 and above contain an exposed password opportunity in plain text when using LdapSettings.get_ldap_info in DP Search. A remote unauthorized unauthenticated attacker could potentially exploit this vulnerability leading to a loss of Confidentiality, Integrity, Protect...
AFFECTED_PRODUCTS:
Dell Data Protection Search
The XML parser in Magic xpi Integration Platform 4.13.4 allows XXE attacks, e.g., via onItemImport.
AFFECTED_PRODUCTS:
Magicsoftware Magic Xpi Integration Platform
Dell Command | Monitor, versions prior to 10.9, contain an arbitrary folder deletion vulnerability. A locally authenticated malicious user may exploit this vulnerability in order to perform a privileged arbitrary file delete.
AFFECTED_PRODUCTS:
Dell Command \| Monitor
Dell Power Manager, versions prior to 3.14, contain an Improper Authorization vulnerability in DPM service. A low privileged malicious user could potentially exploit this vulnerability in order to elevate privileges on the system.
AFFECTED_PRODUCTS:
Dell Power Manager
Transient DOS while parse fils IE with length equal to 1.
Memory corruption when negative display IDs are sent as input while processing DISPLAYESCAPE event trigger.
Memory corruption while validating the TID to Link Mapping action request frame, when a station connects to an access point.
Transient DOS in WLAN Firmware when the length of received beacon is less than length of ieee802.11 beacon frame.
Memory corruption while reading ACPI config through the user mode app.
Transient DOS while processing 11AZ RTT management action frame received through OTA.
Transient DOS while key unwrapping process, when the given encrypted key is empty or NULL.
Memory corruption when AP includes TID to link mapping IE in the beacons and STA is parsing the beacon TID to link mapping IE.
Memory corruption in video while parsing the Videoinfo, when the size of atom is greater than the videoinfo size.
Memory corruption in video while parsing invalid mp2 clip.
Memory corruption in Automotive Multimedia due to improper access control in HAB.
Memory corruption when malformed message payload is received from firmware.
Memory corruption while processing the event ring, the context read pointer is untrusted to HLOS and when it is passed with arbitrary values, may point to address in the middle of ring element.
Memory corruption in HLOS while converting from authorization token to HIDL vector.
Memory corruption in Core when updating rollback version for TA and OTA feature is enabled.
Memory corruption in Core while processing control functions.
Memory corruption in Audio while processing the calibration data returned from ACDB loader.
Memory corruption in Audio while processing IIR config data from AFE calibration block.
Memory corruption in Audio while calling START command on host voice PCM multiple times for the same RX or TX tap points.
Information disclosure in Audio while accessing AVCS services from ADSP payload.
Transient DOS in Audio when invoking callback function of ASM driver.
Transient DOS in Core when DDR memory check is called while DDR is not initialized.
Information disclosure in Modem while processing SIB5.
Transient DOS in Multi-Mode Call Processor while processing UE policy container.
Transient DOS in Multi-Mode Call Processor due to UE failure because of heap leakage.
Memory corruption in Trusted Execution Environment while deinitializing an object used for license validation.
Cybozu KUNAI for Android 3.0.20 to 3.0.21 allows a remote unauthenticated attacker to cause a denial-of-service (DoS) condition by performing certain operations.
AFFECTED_PRODUCTS:
Cybozu Kunai,
Cybozu Kunai
pyLoad is an open-source Download Manager written in pure Python. There is an open redirect vulnerability due to incorrect validation of input values when redirecting users after login. pyLoad is validating URLs via the `get_redirect_url` function when redirecting users at login. This vulnerability...
AFFECTED_PRODUCTS:
Pyload Pyload
Improper authorization verification vulnerability in Samsung Internet prior to version 24.0 allows physical attackers to access files downloaded in SecretMode without proper authentication.
AFFECTED_PRODUCTS:
Samsung Internet
Improper access control vulnerability in Samsung Gallery prior to version 14.5.04.4 allows physical attackers to access the picture using physical keyboard on the lockscreen.
AFFECTED_PRODUCTS:
Samsung Gallery
Implicit intent hijacking vulnerability in UPHelper library prior to version 4.0.0 allows local attackers to access sensitive information via implicit intent.
AFFECTED_PRODUCTS:
Samsung Uphelper Library
Implicit intent hijacking vulnerability in IAP of Galaxy Store prior to version 4.5.63.6 allows local attackers to access sensitive information via implicit intent.
AFFECTED_PRODUCTS:
Samsung Galaxy Store