Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2024-23424 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:04.375Z Description: No description available.
CVE ID: CVE-2024-23425 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:05.517Z Description: No description available.
CVE ID: CVE-2024-23426 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:06.669Z Description: No description available.
CVE ID: CVE-2024-23427 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:07.797Z Description: No description available.
CVE ID: CVE-2024-23428 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:08.956Z Description: No description available.
CVE ID: CVE-2024-23429 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:10.284Z Description: No description available.
CVE ID: CVE-2024-23430 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:11.479Z Description: No description available.
CVE ID: CVE-2024-23431 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:12.594Z Description: No description available.
CVE ID: CVE-2024-23432 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:13.719Z Description: No description available.
CVE ID: CVE-2024-23433 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:14.823Z Description: No description available.
CVE ID: CVE-2024-23434 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:01:15.933Z Description: No description available.
CVE ID: CVE-2024-23435 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:00:08.561Z Description: No description available.
CVE ID: CVE-2024-23436 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:00:12.476Z Description: No description available.
CVE ID: CVE-2024-23437 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:00:10.683Z Description: No description available.
CVE ID: CVE-2024-23438 State: REJECTED Published: N/A Last Updated: 2025-01-01T00:00:20.879Z Description: No description available.
CVE ID: CVE-2024-23439 State: PUBLISHED Published: 2024-02-13T14:58:08.457Z Last Updated: 2025-05-19T18:21:00.607Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: VirusBlokAda Products: Vba32 Antivirus Problem Types: CWE-125 Description: Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability by triggering the 0x22201B, 0x22201F, 0x222023, 0x222027 ,0x22202B, 0x22202F, 0x22203F, 0x222057 and 0x22205B IOCTL codes of the Vba32m64.sys driver. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fluidattacks.com/advisories/adderley/ - https://www.anti-virus.by/vba32
CVE ID: CVE-2024-23440 State: PUBLISHED Published: 2024-02-13T15:01:12.248Z Last Updated: 2025-05-19T18:21:17.618Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H) Vendors: VirusBlokAda Products: Vba32 Antivirus Problem Types: CWE-125 Description: Vba32 Antivirus v3.36.0 is vulnerable to an Arbitrary Memory Read vulnerability. The 0x22200B IOCTL code of the Vba32m64.sys driver allows to read up to 0x802 of memory from ar arbitrary user-supplied pointer. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://fluidattacks.com/advisories/adderley/ - https://www.anti-virus.by/vba32
CVE ID: CVE-2024-23441 State: PUBLISHED Published: 2024-01-29T16:06:17.742Z Last Updated: 2025-06-17T14:26:53.139Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H) Vendors: VirusBlokAda Products: Vba32 Antivirus Problem Types: CWE-125 Description: Vba32 Antivirus v3.36.0 is vulnerable to a Denial of Service vulnerability by triggering the 0x2220A7 IOCTL code of the Vba32m64.sys driver. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://fluidattacks.com/advisories/rollins/ - https://www.anti-virus.by/vba32
CVE ID: CVE-2024-23442 State: PUBLISHED Published: 2024-06-14T14:26:53.169Z Last Updated: 2024-08-01T23:06:24.257Z Severity: MEDIUM (CVSS 6.1 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N) Vendors: Elastic Products: Kibana Problem Types: CWE-601 Description: An open redirect issue was discovered in Kibana that could lead to a user being redirected to an arbitrary website if they use a maliciously crafted Kibana URL. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update/361502
CVE ID: CVE-2024-23443 State: PUBLISHED Published: 2024-06-19T13:47:29.166Z Last Updated: 2024-08-01T23:06:24.281Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Elastic Products: Kibana Problem Types: CWE-400 Description: A high-privileged user, allowed to create custom osquery packs 17 could affect the availability of Kibana by uploading a maliciously crafted osquery pack. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/kibana-8-14-0-7-17-22-security-update-esa-2024-11/361460
CVE ID: CVE-2024-23444 State: PUBLISHED Published: 2024-07-31T17:26:12.784Z Last Updated: 2025-04-04T23:03:01.974Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Elastic Products: Elasticsearch Problem Types: CWE-311 Description: It was discovered by Elastic engineering that when elasticsearch-certutil CLI tool is used with the csr option in order to create a new Certificate Signing Requests, the associated private key that is generated is stored on disk unencrypted even if the --pass parameter is passed in the command invocation. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/elasticse
al Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-23-security-update-esa-2024-12/364157
CVE ID: CVE-2024-23445 State: PUBLISHED Published: 2024-06-12T13:58:45.296Z Last Updated: 2024-10-31T14:18:21.203Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Elastic Products: Elasticsearch Description: It was identified that if a cross-cluster API key https://www.elastic.co/guide/en/elasticsearch/reference/8.14/security-api-create-cross-cluster-api-key.html#security-api-create-cross-cluster-api-key-request-body restricts search for a given index using the query or the field_security parameter, and the same cross-cluster API key also grants replication for the same index, the search restrictions are not enforced during cross cluster search operations an
rants replication for the same index, the search restrictions are not enforced during cross cluster search operations and search results may include documents and terms that should not be returned. This issue only affects the API key based security model for remote clusters https://www.elastic.co/guide/en/elasticsearch/reference/8.14/remote-clusters.html#remote-clusters-security-models that was previously a beta feature and is released as GA with 8.14.0 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/elasticsearch-8-14-0-security-update-esa-2024-13/360898
CVE ID: CVE-2024-23446 State: PUBLISHED Published: 2024-02-07T03:16:39.182Z Last Updated: 2024-08-19T20:08:17.521Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Elastic Products: Kibana Problem Types: CWE-284 Description: An issue was discovered by Elastic, whereby the Detection Engine Search API does not respect Document-level security (DLS) or Field-level security (FLS) when querying the .alerts-security.alerts-{space_id} indices. Users who are authorized to call this API may obtain unauthorized access to documents if their roles are configured with DLS or FLS against the aforementioned index. Additional Analyst Notes: - CVE Program Container: - CISA ADP
nfigured with DLS or FLS against the aforementioned index. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.elastic.co/t/kibana-8-12-1-security-update-esa-2024-01/352686 - https://www.elastic.co/community/security
CVE ID: CVE-2024-23447 State: PUBLISHED Published: 2024-02-07T03:46:25.217Z Last Updated: 2025-04-24T15:58:33.020Z Severity: MEDIUM (CVSS 5.3 CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Elastic Products: Elastic Network Drive Connector Problem Types: CWE-284 Description: An issue was discovered in the Windows Network Drive Connector when using Document Level Security to assign permissions to a file, with explicit allow write and deny read. Although the document is not accessible to the user in Network Drive it is visible in search applications to the user. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/elastic
onal Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/elastic-network-drive-connector-8-12-1-security-update-esa-2024-02/352687 - https://www.elastic.co/community/security
CVE ID: CVE-2024-23448 State: PUBLISHED Published: 2024-02-07T21:37:45.908Z Last Updated: 2024-08-01T23:06:24.582Z Severity: MEDIUM (CVSS 5.7 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N) Vendors: Elastic Products: APM Server Problem Types: CWE-532 Description: An issue was discovered whereby APM Server could log at ERROR level, a response from Elasticsearch indicating that indexing the document failed and that response would contain parts of the original document. Depending on the nature of the document that the APM Server attempted to ingest, this could lead to the insertion of sensitive or private information in the APM Server logs. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE
ion of sensitive or private information in the APM Server logs. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/apm-server-8-12-1-security-update-esa-2024-03/352688 - https://www.elastic.co/community/security
CVE ID: CVE-2024-23449 State: PUBLISHED Published: 2024-03-29T11:12:49.067Z Last Updated: 2024-08-12T13:14:56.771Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Elastic Products: Elasticsearch Problem Types: CWE-248 Description: An uncaught exception in Elasticsearch >= 8.4.0 and < 8.11.1 occurs when an encrypted PDF is passed to an attachment processor through the REST API. The Elasticsearch ingest node that attempts to parse the PDF file will crash. This does not happen with password-protected PDF files or with unencrypted PDF files. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.elastic.co/t/ela
ditional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://discuss.elastic.co/t/elasticsearch-8-11-1-security-update-esa-2024-05/356458
CVE ID: CVE-2024-23450 State: PUBLISHED Published: 2024-03-27T17:03:48.290Z Last Updated: 2025-02-13T17:39:44.035Z Severity: MEDIUM (CVSS 4.9 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Elastic Products: Elasticsearch Problem Types: CWE-400 Description: A flaw was discovered in Elasticsearch, where processing a document in a deeply nested pipeline on an ingest node could cause the Elasticsearch node to crash. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/elasticsearch-8-13-0-7-17-19-security-update-esa-2024-06/356314 - https://www.elastic.co/community/security - https://security.netapp.com/advisory/ntap-20240
-update-esa-2024-06/356314 - https://www.elastic.co/community/security - https://security.netapp.com/advisory/ntap-20240517-0010/
CVE ID: CVE-2024-23451 State: PUBLISHED Published: 2024-03-27T18:03:25.802Z Last Updated: 2024-08-01T23:06:24.259Z Severity: MEDIUM (CVSS 4.4 CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:N/A:N) Vendors: Elastic Products: Elasticsearch Problem Types: CWE-863 Description: Incorrect Authorization issue exists in the API key based security model for Remote Cluster Security, which is currently in Beta, in Elasticsearch 8.10.0 and before 8.13.0. This allows a malicious user with a valid API key for a remote cluster configured to use the new Remote Cluster Security to read arbitrary documents from any index on the remote cluster, and only if they use the Elasticsearch custom transport protocol to issue r
uments from any index on the remote cluster, and only if they use the Elasticsearch custom transport protocol to issue requests with the target index ID, the shard ID and the document ID. None of Elasticsearch REST API endpoints are affected by this issue. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://discuss.elastic.co/t/elasticsearch-8-13-0-security-update-esa-2024-07/356315
CVE ID: CVE-2024-23452 State: PUBLISHED Published: 2024-02-08T09:00:04.809Z Last Updated: 2025-06-04T15:07:20.721Z Vendors: Apache Software Foundation Products: Apache bRPC Problem Types: CWE-444 Description: Request smuggling vulnerability in HTTP server in Apache bRPC 0.9.5~1.7.0 on all platforms allows attacker to smuggle request. Vulnerability Cause Description： The http_parser does not comply with the RFC-7230 HTTP 1.1 specification. Attack scenario: If a message is received with both a Transfer-Encoding and a Content-Length header field, such a message might indicate an attempt to perform request smuggling or response splitting. One particular attack scenario is that a bRPC made http s
an attempt to perform request smuggling or response splitting. One particular attack scenario is that a bRPC made http server on the backend receiving requests in one persistent connection from frontend server that uses TE to parse request with the logic that 'chunk' is contained in the TE field. in that case an attacker can smuggle a request into the connection to the backend server. Solution: You can choose one solution from below: 1. Upgrade bRPC to version 1.8.0, which fixes this issue. Download link: https://github.com/apache/brpc/releases/tag/1.8.0 2. Apply this patch: https://github.com/apache/brpc/pull/2518 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: R
: https://github.com/apache/brpc/pull/2518 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://github.com/apache/brpc/releases/tag/1.8.0 - https://github.com/apache/brpc/pull/2518 - https://lists.apache.org/thread/kkvdpwyr2s2yt9qvvxfdzon012898vxd - http://www.openwall.com/lists/oss-security/2024/02/08/1
CVE ID: CVE-2024-23453 State: PUBLISHED Published: 2024-01-23T23:12:43.141Z Last Updated: 2025-06-04T15:08:36.499Z Vendors: Spoon Radio Japan Inc. Products: Android Spoon application Problem Types: Use of Hard-coded Credentials Description: Android Spoon application version 7.11.1 to 8.6.0 uses hard-coded credentials, which may allow a local attacker to retrieve the hard-coded API key when the application binary is reverse-engineered. This API key may be used for unexpected access of the associated service. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://play.google.com/store/apps/details?id=co.spoonme&hl=en_US - https://spoon-support.spoonca
ichment: References: - https://play.google.com/store/apps/details?id=co.spoonme&hl=en_US - https://spoon-support.spooncast.net/jp/update - https://jvn.jp/en/jp/JVN96154238/
CVE ID: CVE-2024-23454 State: PUBLISHED Published: 2024-09-25T07:45:43.496Z Last Updated: 2025-09-05T09:09:36.997Z Vendors: Apache Software Foundation Products: Apache Hadoop Problem Types: CWE-378 Description: Apache Hadoop’s RunJar.run() does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary directory is shared between all local users. As such, files written in this directory, without setting the correct posix permissions explicitly, may be viewable by all other local users. Additional Analyst Notes: - CVE Program Conta
ct posix permissions explicitly, may be viewable by all other local users. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://issues.apache.org/jira/browse/HADOOP-19031 - https://lists.apache.org/thread/xlo7q8kn4tsjvx059r789oz19hzgfkfs
CVE ID: CVE-2024-23456 State: PUBLISHED Published: 2024-08-06T15:21:51.052Z Last Updated: 2024-08-06T15:44:01.045Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-347 Description: Anti-tampering can be disabled under certain conditions without signature validation. This affects Zscaler Client Connector <4.2.0.190 with anti-tampering enabled. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_version=4.2.0.190
CVE ID: CVE-2024-23457 State: PUBLISHED Published: 2024-05-01T16:26:11.546Z Last Updated: 2024-08-01T23:06:24.279Z Severity: HIGH (CVSS 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-269 Description: The anti-tampering functionality of the Zscaler Client Connector can be disabled under certain conditions when an uninstall password is enforced. This affects Zscaler Client Connector on Windows prior to 4.2.0.209 Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023
CVE ID: CVE-2024-23458 State: PUBLISHED Published: 2024-08-06T15:22:58.963Z Last Updated: 2024-08-06T18:36:26.478Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:L) Vendors: Zscaler Products: Client Connector Problem Types: CWE-346 Description: While copying individual autoupdater log files, reparse point check was missing which could result into crafted attacks, potentially leading to a local privilege escalation. This issue affects Zscaler Client Connector on Windows <4.2.0.190. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_versi
help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=windows&applicable_version=4.2.0.190
CVE ID: CVE-2024-23459 State: PUBLISHED Published: 2024-05-02T13:11:19.436Z Last Updated: 2024-08-01T23:06:24.598Z Severity: HIGH (CVSS 7.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-59 Description: An Improper Link Resolution Before File Access ('Link Following') vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macos&applicable_versi
//help.zscaler.com/client-connector/client-connector-app-release-summary-2022?applicable_category=macos&applicable_version=3.7
CVE ID: CVE-2024-23460 State: PUBLISHED Published: 2024-08-06T15:29:26.050Z Last Updated: 2024-08-06T20:06:58.896Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:A/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N) Vendors: Zscaler Products: Client Connector Problem Types: CWE-347 Description: The Zscaler Updater process does not validate the digital signature of the installer before execution, allowing arbitrary code to be locally executed. This affects Zscaler Client Connector on MacOS <4.2. Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=macos&applicable_version=4.2
CVE ID: CVE-2024-23461 State: PUBLISHED Published: 2024-05-02T13:11:29.433Z Last Updated: 2024-08-01T23:06:24.232Z Severity: MEDIUM (CVSS 4.2 CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:N/I:N/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-354 Description: An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS during the upgrade process may allow a Local Execution of Code.This issue affects Client Connector on MacOS: before 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021?applicable_category=macos&appl
tps://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021?applicable_category=macos&applicable_version=3.4
CVE ID: CVE-2024-23462 State: PUBLISHED Published: 2024-05-02T13:11:38.955Z Last Updated: 2024-08-01T23:06:24.159Z Severity: LOW (CVSS 3.3 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L) Vendors: Zscaler Products: Client Connector Problem Types: CWE-354 Description: An Improper Validation of Integrity Check Value vulnerability in Zscaler Client Connector on MacOS allows a denial of service of the Client Connector binary and thus removing client functionality.This issue affects Client Connector on MacOS: before 3.4. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021
ram Container: References: - https://help.zscaler.com/zscaler-client-connector/client-connector-app-release-summary-2021?applicable_category=macos&applicable_version=3.4
CVE ID: CVE-2024-23463 State: PUBLISHED Published: 2024-04-30T16:17:53.710Z Last Updated: 2024-08-29T19:20:46.517Z Severity: HIGH (CVSS 8.8 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-367 Description: Anti-tampering protection of the Zscaler Client Connector can be bypassed under certain conditions when running the Repair App functionality. This affects Zscaler Client Connector on Windows prior to 4.2.1 Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023
CVE ID: CVE-2024-23464 State: PUBLISHED Published: 2024-08-06T15:24:03.730Z Last Updated: 2024-08-06T15:41:17.867Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: Zscaler Products: Client Connector Problem Types: CWE-281 Description: In certain cases, Zscaler Internet Access (ZIA) can be disabled by PowerShell commands with admin rights. This affects Zscaler Client Connector on Windows <4.2.1 Additional Analyst Notes: - CISA ADP Vulnrichment: References: - https://help.zscaler.com/client-connector/client-connector-app-release-summary-2023?applicable_category=Windows&applicable_version=4.2.1
CVE ID: CVE-2024-23465 State: PUBLISHED Published: 2024-07-17T14:27:31.092Z Last Updated: 2024-08-01T23:06:24.653Z Severity: HIGH (CVSS 8.3 CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H) Vendors: SolarWinds Products: Access Rights Manager Problem Types: CWE-287 Description: The SolarWinds Access Rights Manager was found to be susceptible to an authentication bypass vulnerability. This vulnerability allows an unauthenticated user to gain domain admin access within the Active Directory environment. Additional Analyst Notes: - CISA ADP Vulnrichment: - CVE Program Container: References: - https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm