16 matches found
Advisory ROSA-SA-2021-1945
Software: pango 1.42.4 OS: Cobalt 7.9 CVE-ID: CVE-2020-17365 CVE-Crit: HIGH CVE-DESC: Incorrect directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier could allow an authorized user to potentially enable privilege escalation via local access. The...
CVE-2017-17365
CVE-2017-17365 is rejected/not used; this CVE ID is not an active vulnerability entry.
CVE-2020-17365
creationtimestamp| type| source ---|---|--- 2020-10-21 12:04:45+00:00| seen| https://t.me/thebugbountyhunter/4818 2020-10-21 18:29:30+00:00| seen| https://t.me/canyoupwnme/6653 2020-11-08 07:38:00+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/1967...
CVE-2020-17365
Improper directory permissions in the Hotspot Shield VPN client software for Windows 10.3.0 and earlier may allow an authorized user to potentially enable escalation of privilege via local access. The vulnerability allows a local user to corrupt system files: a local user can create a specially...
CVE-2020-17365
CVE-2020-17365 affects the Hotspot Shield VPN client for Windows 10.3.0 and earlier. The issue is improper directory permissions that allow a local user to escalate privileges by creating a crafted symbolic link to a critical system file and overwriting it with the application’s privileges. Explo...
Chadha PHPKB Cross-Site Scripting Vulnerability (CNVD-2020-17365)
Chadha Software Technologies PHPKB Standard Multi-Language is a web-based, multi-language knowledge base management system from Chadha Software Technologies, India. A reflected cross-site scripting vulnerability exists in admin/manage-fields.php in Chadha PHPKB Standard Multi-Language version 9...
Code injection
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365...
CVE-2019-18192
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365...
CVE-2019-18192
GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365...
CVE-2019-17365
Nix through 2.3 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable...
CVE-2019-17365
Summary: CVE-2019-17365 affects Nix up to version 2.3, where local users can gain access to arbitrary user accounts due to the parent directory of user-profile directories being world-writable. This local elevation of privilege is supported by multiple related entries (e.g., Red Hat and NVD recor...
NixOS Nix CVE-2019-17365 Local Privilege Escalation Vulnerability
Description NixOS Nix is prone to a local privilege-escalation vulnerability. An attacker may exploit this issue to gain elevated privileges. Successful exploits may aid in further attacks. Nix versions through 2.3 are vulnerable. Technologies Affected NixOS Nix 1.0 NixOS Nix 1.5 NixOS Nix 1.9...
Wacom update helper tool startProcess privilege escalation vulnerability
Summary An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to...
CVE-2018-17365
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...
CVE-2018-17365
SeaCMS versions 6.64 and 7.2 expose an ARBITRARY FILE DELETION vulnerability exploitable via the filedir parameter. The root cause is improper handling of the filedir input, allowing remote attackers to delete files on the server. Impact is exposure of file deletion capability (integrity/availabi...