Semaine du 3 avril au 9 avril 2023

Arm Mali Graphics Processing Unit (GPU)

Arm Mali GPU Kernel Driver Information Disclosure Vulnerability — Arm Mali GPU Kernel Driver contains an information disclosure vulnerability that allows a non-privileged user to make valid GPU processing operations that expose sensitive kernel metadata.

Veritas Backup Exec Agent

Veritas Backup Exec Agent Command Execution Vulnerability — Veritas Backup Exec (BE) Agent contains a command execution vulnerability that could allow an attacker to use a data management protocol command to execute a command on the BE Agent machine.

Veritas Backup Exec Agent

Veritas Backup Exec Agent Improper Authentication Vulnerability — Veritas Backup Exec (BE) Agent contains an improper authentication vulnerability that could allow an attacker unauthorized access to the BE Agent via SHA authentication scheme.

Veritas Backup Exec Agent

Veritas Backup Exec Agent File Access Vulnerability — Veritas Backup Exec (BE) Agent contains a file access vulnerability that could allow an attacker to specially craft input parameters on a data management protocol command to access files on the BE Agent machine.

Microsoft Windows

Microsoft Windows Certificate Dialog Privilege Escalation Vulnerability — Microsoft Windows Certificate Dialog contains a privilege escalation vulnerability, allowing attackers to run processes in an elevated context.

Synacor Zimbra Collaboration Suite (ZCS)

Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability — Synacor Zimbra Collaboration Suite (ZCS) contains a cross-site scripting vulnerability by allowing an endpoint URL to accept parameters without sanitizing.