Lucene search
+L

115 matches found

OSV
OSV
added 2022/11/23 6:15 p.m.14 views

CVE-2009-1142

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled...

6.7CVSS6.9AI score
SaveExploits0References3
CVE
CVE
added 2022/11/23 12:00 a.m.95 views

CVE-2009-1142

CVE-2009-1142 affects open-vm-tools version 2009.03.18-154848. The vulnerability arises when the vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled, allowing a local attacker to perform a symlink attack on files in /tmp to gain privileges. Multiple connected s...

6.7CVSS6.6AI score0.00265EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2022/11/23 12:00 a.m.7 views

CVE-2009-1142

An issue was discovered in open-vm-tools 2009.03.18-154848. Local users can gain privileges via a symlink attack on /tmp files if vmware-user-suid-wrapper is setuid root and the ChmodChownDirectory function is enabled...

7AI score0.00265EPSS
SaveExploits0References2
Circl
Circl
added 2022/07/23 7:24 a.m.9 views

CVE-2022-1142

creationtimestamp| type| source ---|---|--- 2022-07-23 07:24:06+00:00| seen| https://t.me/cibsecurity/46849...

8.8CVSS7.2AI score0.00771EPSS
SaveExploits0References1
OSV
OSV
added 2022/07/23 12:15 a.m.25 views

CVE-2022-1142

Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools...

8.8CVSS8.9AI score
SaveExploits0References3
UbuntuCve
UbuntuCve
added 2022/07/23 12:15 a.m.50 views

CVE-2022-1142

Heap buffer overflow in WebUI in Google Chrome prior to 100.0.4896.60 allowed a remote attacker who convinced a user to engage in specific user interaction to potentially exploit heap corruption via specific input into DevTools...

8.8CVSS7.2AI score0.00771EPSS
SaveExploits0References1
CVE
CVE
added 2022/07/22 11:39 p.m.112 views

CVE-2022-1142

CVE-2022-1142 : Heap buffer overflow in WebUI of Google Chrome prior to 100.0.4896.60. A remote attacker could trigger heap corruption via specific input in DevTools after convincing a user to perform certain interactions. The vulnerability affects Google Chrome’s WebUI and is rated high severity...

8.8CVSS8.7AI score0.00771EPSS
SaveExploits0References3Affected Software1
OPENSUSE Linux
OPENSUSE Linux
added 2022/04/13 12:00 a.m.48 views

Security update for chromium (important)

openSUSE Security Update: Security update for chromium Announcement ID: openSUSE-SU-2022:0112-1 Rating: important References: 1194511 1194512 1194513 1194514 1197680 1198053 1198361 Cross-References: CVE-2021-44531 CVE-2021-44532 CVE-2021-44533 CVE-2022-1125 CVE-2022-1127 CVE-2022-1128...

5.9CVSS8AI score0.21514EPSS
SaveExploits31References7
OpenVAS
OpenVAS
added 2022/04/07 12:00 a.m.23 views

Mageia: Security Advisory (MGASA-2022-0130)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

8.8CVSS7.6AI score0.0179EPSS
SaveExploits17References4
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.23 views

SUSE: Security Advisory (SUSE-SU-2012:0483-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.05574EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.24 views

SUSE: Security Advisory (SUSE-SU-2012:0553-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS7.5AI score0.30653EPSS
SaveExploits15References2
OpenVAS
OpenVAS
added 2021/06/09 12:00 a.m.28 views

SUSE: Security Advisory (SUSE-SU-2012:0483-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.7AI score0.05574EPSS
SaveExploits0References2
Circl
Circl
added 2021/01/21 12:27 a.m.17 views

CVE-2021-1142

creationtimestamp| type| source ---|---|--- 2021-01-21 00:27:48+00:00| seen| https://t.me/cibsecurity/22468...

10CVSS8.7AI score0.04345EPSS
SaveExploits0References1
CVE
CVE
added 2021/01/20 8:11 p.m.88 views

CVE-2021-1142

CVE-2021-1142 affects Cisco Smart Software Manager Satellite Web UI. Affected: Satellite 5.1.0 and earlier. Root cause: insufficient input validation in the web UI enabling command injection. Impact: unauthenticated, remote attacker could execute arbitrary OS commands. Remediation: Cisco advisory...

10CVSS9.9AI score0.04345EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2020/05/21 11:15 p.m.16 views

CVE-2020-1142

An elevation of privilege vulnerability exists in the way that the Windows Graphics Device Interface GDI handles objects in memory. An attacker who successfully exploited this vulnerability could run arbitrary code in kernel mode. An attacker could then install programs; view, change, or delete...

7.8CVSS8.7AI score0.00923EPSS
SaveExploits0References2
CVE
CVE
added 2020/05/21 10:53 p.m.89 views

CVE-2020-1142

CVE-2020-1142 is a Windows GDI Elevation of Privilege vulnerability in which the Graphics Device Interface mishandles objects in memory, enabling local attackers to run code in kernel mode after logging on. The NVD/MS advisories describe a high-impact, local, privilege-escalation flaw with 7.2/7....

7.8CVSS7.5AI score0.00923EPSS
SaveExploits0References2Affected Software3
CVE
CVE
added 2019/09/11 9:24 p.m.196 views

CVE-2019-1142

CVE-2019-1142 affects the Microsoft .NET Framework CLR, where the runtime can create files in arbitrary locations, enabling elevation of privilege. The vulnerability is described as an elevation of privilege in the CLR that allows writing files to folders requiring higher privileges. In public do...

5.5CVSS6.8AI score0.01039EPSS
SaveExploits0References1Affected Software1
OpenVAS
OpenVAS
added 2019/09/11 12:00 a.m.85 views

Microsoft .NET Framework Privilege Escalation Vulnerability (KB4514601)

This host is missing an important security update according to Microsoft KB4514601 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

5.5CVSS5.8AI score0.01039EPSS
SaveExploits0References3
OpenVAS
OpenVAS
added 2019/09/11 12:00 a.m.54 views

Microsoft Windows Multiple Vulnerabilities (KB4516070)

This host is missing a critical security update according to Microsoft KB4516070 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This progra...

9.3CVSS7AI score0.60366EPSS
SaveExploits8References3
OpenVAS
OpenVAS
added 2019/09/11 12:00 a.m.51 views

Microsoft .NET Framework Privilege Escalation Vulnerability (KB4514354)

This host is missing an important security update according to Microsoft KB4514354 Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...

5.5CVSS5.8AI score0.01039EPSS
SaveExploits0References1
Rows per page
Query Builder