The vulnerability of the asynchronous input/output interface io_uring in Linux kernel allows a attacker to cause memory corruption and elevate their privileges to root level.

The vulnerability of the asynchronous input/output interface iouring in Linux operating systems is related to integer overflow. Exploiting this vulnerability can allow an attacker to cause memory corruption and elevate their privileges to the root level...

CVE-2022-29402

TP-Link TL-WR840N EU v6.20 was discovered to contain insecure protections for its UART console. This vulnerability allows attackers to connect to the UART port via a serial connection and execute commands as the root user without authentication...

TP-LINK TL-WR840N 访问控制错误漏洞

The TP-LINK TL-WR840N is a wireless router from China P&L TP-LINK. An Access Control Error vulnerability exists in the TP-Link TL-WR840N EU v6.20, which stems from an insecure UART console, and can be exploited by an attacker to execute commands as the root user without authentication...

GHSA-FMRF-GVJP-5J5G Improper Privilege Management in Cilium

Impact If an attacker is able to perform a container escape of a container running as root on a host where Cilium is installed, the attacker can leverage Cilium's Kubernetes service account to gain access to cluster privileges that are more permissive than what is minimally required to operate...

Centreon Privilege Escalation

In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files...

GHSA-F24J-F97W-65H8 Centreon Privilege Escalation

In Centreon VM through 19.04.3, centreon-backup.pl allows attackers to become root via a crafted script, due to incorrect rights of sourced configuration files...

SUSE-SU-2022:1831-1 Security update for slurm_20_11

This update for slurm2011 fixes the following issues: - CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute arbitrary processes as root bsc1199278. - CVE-2022-29501: Fixed a problem that an unprivileged user could have sent data to...

SUSE-SU-2022:1815-1 Security update for slurm_20_11

This update for slurm2011 fixes the following issues: - CVE-2022-29500: Fixed architectural flaw that could have been exploited to allow an unprivileged user to execute arbitrary processes as root bsc1199278. - CVE-2022-29501: Fixed a problem that an unprivileged user could have sent data to...

CVE-2022-31258

In Checkmk before 1.6.0p29, 2.x before 2.0.0p25, and 2.1.x before 2.1.0b10, a site user can escalate to root by editing an OMD hook symlink...

CVE-2022-22973

VMware Workspace ONE Access and Identity Manager contain a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'...

Cilium安全漏洞

Cilium is an open source software. It is used to provide and transparently secure network connectivity and load balancing between application workloads such as application containers or processes. A security vulnerability exists in Cilium versions prior to 1.9.16, 1.10.11, and 1.11.15. An attacke...

CVE-2022-22972: Critical Authentication Bypass in VMware Workspace ONE Access, Identity Manager, and vRealize Automation

On May 18, 2022, VMware published VMSA-2022-0014 on CVE-2022-22972 and CVE-2022-22973. The more severe of the two vulnerabilities is CVE-2022-22972, a critical authentication bypass affecting VMware’s Workspace ONE Access, Identity Manager, and vRealize Automation solutions. The vulnerability...

Multiple vulnerabilities in Rakuten Casa

Overview Rakuten Casa provided by Rakuten Mobile, Inc. contains multiple vulnerabilities listed below. Use of Hard-coded Credentials CWE-798 - CVE-2022-29525 Improper Access Control CWE-284 - CVE-2022-28704 Improper Access Control CWE-284 - CVE-2022-26834 CVE-2022-29525 Narumi Hirai of LAC Co.,...

Arbitrary Code Execution

apport is vulnerable to race condition. The vulnerability exists in the 'replaced executable' detection that with the correct local configuration which allows an attacker to execute arbitrary code as root...

CVE-2022-30105

In Belkin N300 Firmware 1.00.08, the script located at /settinghidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the form name form; list vulnerable parameters, are not properly sanitize...

CVE-2022-30105

In Belkin N300 Firmware 1.00.08, the script located at /settinghidden.asp, which is accessible before and after configuring the device, exhibits multiple remote command injection vulnerabilities. The following parameters in the form name form; list vulnerable parameters, are not properly sanitize...

CVE-2022-29645

TOTOLINK A3100R V4.1.2cu.5050B20200504 and V4.1.2cu.5247B20211129 were discovered to contain a hard coded password for root stored in the component /etc/shadow.sample...

Vulnerability fixed in SonicWall SMA100

SonicWall has fixed a vulnerability in the SMA100. The vulnerability allows an authenticated remote malicious person potentially be able to use the management interface to execute arbitrary commands execute as "root" on the underlying system, or to cause a denial-of-service. SonicWall has release...

PT-2022-2637 · Vmware · Vmware Workspace One Identity Manager +1

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Access and Identity Manager affected versions not specified Description: The issue is related to a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. This...

Belkin N300 Firmware 操作系统命令注入漏洞

Belkin N300 Firmware is firmware for Belkin's Belkin N300 router. A security vulnerability exists in Belkin N300 Firmware version 1.00.08, which stems from multiple remote command injection vulnerabilities in the script /settinghidden.asp accessible both before and after configuring the device. A...