13 matches found
CVE-2026-9490
A security vulnerability has been identified in Acer Care Center where the ACCSvc service creates a Named Pipe with a weak Security Descriptor. This vulnerability allows an authenticated local user to connect and send a specially crafted message message type 0x03 to the pipe, causing the service ...
CVE-2026-9490
Affected product: Acer Care Center (ACC Svc). The vulnerability arises because the ACCSvc service creates a Named Pipe with a weak security descriptor, permitting an authenticated local user to connect and send a crafted message (type 0x03). This can trigger the service to crash with exit code 10...
SUSE CVE-2026-43051
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacomintuosbtirq The wacomintuosbtirq function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short report can trigger an out-of-bounds read when...
CVE-2026-43051
In the Linux kernel, the following vulnerability has been resolved: HID: wacom: fix out-of-bounds read in wacomintuosbtirq The wacomintuosbtirq function processes Bluetooth HID reports without sufficient bounds checking. A maliciously crafted short report can trigger an out-of-bounds read when...
SUSE CVE-2021-42376
A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted shell command, due to missing validation after a \x03 delimiter character. This may be used for DoS under very rare conditions of filtered command input...
Exploit for Code Injection in Vmware Identity_Manager
CVE-2022-22954 VMware Workspace ONE Access remote code exe...
Rockwell Automation Micrologix Improper Access Control (CVE-2017-14466)
An exploitable access control vulnerability exists in the data, program, and function file permissions functionality of Allen Bradley Micrologix 1400 Series B FRN 21.2 and before. A specially crafted packet can cause a read or write operation resulting in disclosure of sensitive information,...
CVE-2021-32963
Null pointer dereference in SuiteLink server while processing commands 0x03/0x10...
Aveva SuiteLink Server 代码问题漏洞
Aveva SuiteLink Server is a communication server from AVEVA Aveva, UK. A code issue vulnerability exists in AVEVA SuiteLink Server that stems from a null pointer dereference in the SuiteLink Server when the SuiteLink Server handles command 0x03/0x10...
PT-2018-5661 · Allen Bradley · Allen Bradley Micrologix 1400 Series B
Name of the Vulnerable Software and Affected Versions: Allen Bradley Micrologix 1400 Series B FRN versions 21.2 and before Description: The issue concerns a problem with access control in the data, program, and function file permissions functionality. This can be exploited by sending specially...
Linux Kernel 3.2.0-23/3.5.0-23 (Ubuntu 12.04/12.04.1/12.04.2 x64) - 'perf_swevent_init' Local Privilege Escalation (3)
/ Ubuntu 12.04 3.x x8664 perfsweventinit Local root exploit by Vitaly Nikolenko [email protected] based on semtex.c by sd Supported targets: 0 Ubuntu 12.04.0 - 3.2.0-23-generic 1 Ubuntu 12.04.1 - 3.2.0-29-generic 2 Ubuntu 12.04.2 - 3.5.0-23-generic $ gcc vnik.c -O2 -o vnik $ uname -r...
EMC AutoStart ftAgent Multiple Remote Code Execution Vulnerabilities (ESA-2012-020)
The version of EMC AutoStart on the remote host reportedly contains multiple remote code execution vulnerabilities : - The EMC AutoStart ftAgent, when processing messages with opcode 0x32 and subcode 0x04, opcode 0x32 and subcode 0x02, opcode 0x03 and subcode 0x04, opcode 0x55 and subcode 0x16,...
LabWiki <= 1.1 Multiple Vulnerabilities
Exploit for php platform in category web applications ------------------------------------------------------------------------ LabWiki alert'muuratsalo'&help=true&page=Whatiswiki http://localhost/LabWiki/recentchanges.php?nothing=nothing&pageno="alert'muuratsalo' 0day.today 2018-01-03...