CVE-2022-47893

There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root...

Remote code execution

There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root...

CVE-2022-47893 NetMan 204 Remote Code Execution

There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root...

CVE-2022-47893

CVE-2022-47893 : The provided documents describe a remote code execution vulnerability affecting NetMan 204 where an attacker could upload a firmware file containing a webshell to execute arbitrary code as root. Core details: affected product NetMan 204 ; vulnerability via firmware upload; impact...

CVE-2023-36628

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

Privilege escalation

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

VASA Security Breach

VMware VASA is a virtual volume storage provider program from VMware. A security vulnerability exists in VASA that originates from allowing a user with access to the vSphere/ESXi VMware administrator on FlashArray to gain root access via privilege escalation...

CVE-2022-47893: Unrestricted Upload of File with Dangerous Type

There is a remote code execution vulnerability that affects all versions of NetMan 204. A remote attacker could upload a firmware file containing a webshell, that could allow him to execute arbitrary code as root...

CVE-2023-36628 Privilege Escalation in VASA

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

CVE-2023-36628 Privilege Escalation in VASA

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

CVE-2023-36628

CVE-2023-36628 describes a privilege-escalation flaw in Pure Storage VASA. The issue arises when a user with access to a vSphere/ESXi administrator on a FlashArray can obtain root access, due to inadequate access control in the VASA component. Affected software is described as Pure Storage VASA (...

The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router’s microprogramming system allows a hacker to execute arbitrary code.

The vulnerability of the SetDynamicDNSSettings function in the prog.cgi file of the D-Link DIR-3040 wireless router operating system exists due to the lack of proper validation of the string provided by the user before it is copied into the fixed-length stack-based buffer. Exploiting this...

CVE-2023-36628: Improper Privilege Management

A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation...

PT-2023-5848 · Pure Storage +1 · Flasharray +3

Name of the Vulnerable Software and Affected Versions: Pure Storage VASA affected versions not specified Description: A flaw exists in VASA which allows users with access to a vSphere/ESXi VMware admin on a FlashArray to gain root access through privilege escalation. The issue is related to...

CVE-2023-40375

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...

CVE-2023-40375

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...

Privilege escalation

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...

CVE-2023-40375 IBM i privilege escalation

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...

CVE-2023-40375 IBM i privilege escalation

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...

CVE-2023-40375: Improper Privilege Management

Integrated application server for IBM i 7.2, 7.3, 7.4, and 7.5 contains a local privilege escalation vulnerability. A malicious actor with command line access to the host operating system can elevate privileges to gain root access to the host operating system. IBM X-Force ID: 263580...