CVE-2024-38143

CVSS v3 Score
4.2
Medium

Vulnerability Description

Windows WLAN AutoConfig Service Elevation of Privilege Vulnerability

CVSS:4.3(Medium)

The Zizai Tech Nut device allows unauthenticated Bluetooth pairing, which enables unauthenticated connected applications to write data to the device name attribute.

CVSS:4.3(Medium)

A vulnerability in the web-based management interface of Cisco Identity Services Engine (ISE) Software could allow an unauthenticated, remote attacker read tcpdump files generated on an affected devic...

CVSS:4.3(Medium)

A vulnerability in the web-based management interface of Cisco UCS Director could allow an unauthenticated, remote attacker to download system log files from an affected device. The vulnerability is d...

CVSS:4.3(Medium)

In smsSelected of AnswerFragment.java, there is a way to send an SMS from the lock screen due to a permissions bypass. This could lead to local escalation of privilege on the lock screen with no addit...

CVSS:4.3(Medium)

An incorrect access control implementation in Tangro Business Workflow before 1.18.1 allows an attacker to download documents (PDF) by providing a valid document ID and token. No further authenticatio...

CVSS:4.3(Medium)

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions chat participants can spoof their...