Microsoft Windows Ancillary Function Driver for WinSock 权限许可和访问控制问题漏洞

Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock due to permission and access control issues. The following products and editions are...

Microsoft Windows Print Spooler Components权限许可和访问控制问题漏洞

Microsoft Windows Print Spooler Components is a printing backend handler component from Microsoft Corporation USA. A vulnerability exists in microsoft Windows Print Spooler Components due to privilege permission and access control issues. The following products and editions are affected:Windows 1...

Microsoft Windows Update Assistant 权限许可和访问控制问题漏洞

Microsoft Windows Update Assistant is a system update tool from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Update Assistant due to privilege permission and access control issues. The following products and editions are affected:Windows 10 Version 1809 for 32-bit...

Microsoft Azure Sphere 权限许可和访问控制问题漏洞

Microsoft Azure Sphere is an appliance from Microsoft Corporation USA that is used to provide security in cloud environments. A vulnerability exists in Microsoft Azure Sphere with privilege permission and access control issues. The following products and versions are affected:Azure Sphere...

Apache Containerd 权限许可和访问控制问题漏洞

containerd is a container daemon from the Apache Foundation. The process is responsible for controlling the full cycle of containers on the host according to the RunC OCI specification. A security vulnerability exists in Containerd versions prior to 1.4.8 and 1.5.4, which stems from a specially...

OPENSUSE-SU-2021:2202-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP3 azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2020-26558: Bluetooth LE and BR/EDR secure pairing in Bluetooth Core Specification 2.1 may permit a nearby man-in-the-middle attacker to identify the...

Google Chrome iFrameSandbox Permission License and Access Control Issues Vulnerability

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A privilege permission and access control issue vulnerability exists in versions prior to Google Chrome iFrameSandbox 91.0.4472.77, which can be exploited by an...

Exim Permission License and Access Control Issues Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a privilege-granting and access-control issue vulnerability that stems from the application not properly applying security restrictions to a fake offline directory. An...

Mozilla Firefox Permission License and Access Control Issues Vulnerability (CNVD-2021-49133)

Mozilla Firefox is an open source web browser. A security vulnerability exists in Mozilla Firefox, which can be exploited by remote attackers using test code to enable session history manipulation...

VMware NSX-T Privilege License and Access Control Issues Vulnerability

Vmware VMware NSX-T is a Vmware architecture for building cloud-native applications. The service provides networking, security and automation and simplifies operations for emerging application frameworks and architectures with heterogeneous endpoint environments and technology stacks. NSX-T 3.1.1...

Schneider Electric C-Bus Toolkit Privilege Permission and Access Control Issues Vulnerability

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug a C-Bus installation on a personal computer. A privilege permission and access control issue vulnerability exists in C-Bus Toolkit V1.15.7 and prior versions, which arises fr...

Juniper Networks Junos OS 权限许可和访问控制问题漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to privilege permission and access control issues, for which no information is currently available...

SUSE-SU-2021:0386-1 Security update for the Linux Kernel (Live Patch 21 for SLE 15 SP1)

This update for the Linux Kernel 4.12.14-19778 fixes several issues. The following security issues were fixed: - CVE-2020-29569: Fixed a use after free due to a logic error bsc1180008. - CVE-2020-29368: Fixed an issue in copy-on-write implementation which could grant unintended write access becau...

Dell EMC PowerScale OneFS Privilege Permission and Access Control Issues Vulnerability

Dell EMC PowerScale OneFS is an API-powered file system. Dell EMC PowerScale OneFS 8.1.2, 8.2.2 is vulnerable to privilege permission and access control issues. An attacker with ISIPRIVLOGINCONSOLE or ISIPRIVLOGINSSH privileges could exploit this vulnerability to corrupt cryptographic operations...

1E Client Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-02032)

1E Client is an agent-less endpoint management software from 1E 1E Client USA. A security vulnerability exists in 1E Client versions 5.0.0.745, 4.1.0.267, which originates in the %PROGRAMDATA%1EClient directory that allows remote authenticated and local users to create and modify files in...

Mitel MiCollab Information Disclosure Vulnerability

Mitel MiCollab is an enterprise collaboration software and tools platform solution. An information disclosure vulnerability exists in Mitel MiCollab versions prior to 9.2 for NuPoint Messenger. The vulnerability stems from insufficient access control. An attacker could exploit the vulnerability t...

NZXT CAM Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-03262)

NZXT CAM is a performance monitoring software for gaming computers from NZXT USA. The software can be used to manage computer performance, temperature, and devices to ensure that the computer is at optimal performance. NZXT CAM 4.8.0 suffers from a Privilege Permission and Access Control Issues...

PT-2020-14365 · Zyxel · Zyxel Cloudcnm Secumanager

Name of the Vulnerable Software and Affected Versions: Zyxel CloudCNM SecuManager versions 3.1.0 through 3.1.1 Description: The issue is related to weak Data.fs permissions in the affected software. Recommendations: For versions 3.1.0 and 3.1.1, update the permissions of the Data.fs file to ensur...

GOG Galaxy Privilege Permission and Access Control Issues Vulnerability (CNVD-2021-25692)

GOG Galaxy is a game client program from the Polish company GOG. The program is used to install, launch and update games. A vulnerability exists in GOG Galaxy version 1.2.x prior to 1.2.62 and version 2.0.x prior to 2.0.12 in the context of privilege permission and access control issues. An...

Tencent Ups Top Bug-Bounty Award to $15K

The Tencent Security Response Center TSRC is launching an expanded bug-bounty program, via the HackerOne white-hat platform – and the company has increased its top reward to $15,000. Tencent, a China-based global internet service provider, is opening up its existing bug-bounty program to...