200 matches found
CVE-2023-0386
creationtimestamp| type| source ---|---|--- 2023-03-22 23:36:07+00:00| seen| https://t.me/cibsecurity/60523 2023-05-05 03:10:29+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4290 2023-05-05 12:50:12+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/4296 2023-05-05...
AZL-25742 CVE-2023-0386 affecting package kernel for versions less than 5.15.107.1-2
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another mount. This uid mapping bug allows a local user to escalat...
Local Privilege Escalation via CVE-2023-0386
This exploit targets the Linux kernel bug in OverlayFS. A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel's OverlayFS subsystem in how a user copies a capable file from a nosuid mount into another...
CVE-2023-0386
CVE-2023-0386 describes a Linux kernel OverlayFS uid-mapping bug that lets a local user escalate privileges by improperly handling execution of setuid-capable files copied between mounts. Connected advisories confirm this CVE affecting upstream Linux kernel and note fixes via newer kernel package...
Mageia: Security Advisory (MGASA-2022-0386)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : libnl3 (SUSE-SU-2022:3208-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3208-1 advisory. - CVE-2017-0386: Fixed an issue that could enable a local malicious application to execute arbitrary code within the context of a different...
SUSE: Security Advisory (SUSE-SU-2022:3208-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2022:3207-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE SLES12 Security Update : libnl-1_1 (SUSE-SU-2022:3207-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2022:3207-1 advisory. - CVE-2017-0386: Fixed an issue that could enable a local malicious application to execute arbitrary code within the context of a different...
SUSE-SU-2022:3208-1 Security update for libnl3
This update for libnl3 fixes the following issues: - CVE-2017-0386: Fixed an issue that could enable a local malicious application to execute arbitrary code within the context of a different process. This only affects setups were libnl is passed untrusted arguments. bsc1020123...
CVE-2022-0386
CVE-2022-0386 is a post-auth SQL injection vulnerability in Sophos UTM’s Mail Manager. The issue could allow an authenticated attacker to execute code on affected appliances, prior to version 9.710. Evidence from multiple sources confirms the vulnerability in Sophos UTM, with CVSS data indicating...
Mageia: Security Advisory (MGASA-2018-0386)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mageia: Security Advisory (MGASA-2017-0386)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2012:0386-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SUSE: Security Advisory (SUSE-SU-2015:0386-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-0386
creationtimestamp| type| source ---|---|--- 2021-03-10 20:53:17+00:00| seen| https://t.me/cibsecurity/24718...
CVE-2021-0386
CVE-2021-0386 affects Android 11 in the UsbConfirmActivity onCreate, enabling a tapjacking vector due to an insecure default value. The vulnerability could allow local escalation of privilege with user interaction required for exploitation (ATT&CK: Local, UI: Required). The issue is documented ac...
Oracle MySQL Server 5.5 <= 5.5.28 Security Update (cpujan2013) - Linux
Oracle MySQL Server is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:oracle:mysql"; if...
CVE-2020-0386
creationtimestamp| type| source ---|---|--- 2020-09-17 21:55:16+00:00| seen| https://t.me/cibsecurity/14724...
CVE-2020-0386
CVE-2020-0386 concerns an Elevation of Privilege in Android related to a tapjacking risk in RequestPermissionActivity.java. The issue arises in onCreate where an insecure default value could enable a local attacker to manipulate Bluetooth discoverability, requiring user interaction for exploitati...