CVE-2023-36876

Reliability Analysis Metrics Calculation RacTask Elevation of Privilege Vulnerability...

CVE-2023-36876

Reliability Analysis Metrics Calculation RacTask Elevation of Privilege Vulnerability...

CVE-2023-35379

Reliability Analysis Metrics Calculation Engine RACEng Elevation of Privilege Vulnerability...

CVE-2023-35379

Reliability Analysis Metrics Calculation Engine RACEng Elevation of Privilege Vulnerability...

CVE-2023-35379

Reliability Analysis Metrics Calculation Engine RACEng Elevation of Privilege Vulnerability...

Privilege escalation

Reliability Analysis Metrics Calculation Engine RACEng Elevation of Privilege Vulnerability...

Privilege escalation

Reliability Analysis Metrics Calculation RacTask Elevation of Privilege Vulnerability...

Malicious code in @tendable/ui-kit (npm)

--- -= Per source details. Do not edit below this line.=- Source: ossf-package-analysis 530df54e3b7520850cd182b11fa3bb60f72e996b941a80467c006de084372f29 The OpenSSF Package Analysis project identified '@tendable/ui-kit' @ 99.0.1 npm as malicious. It is considered malicious because: - The package...

CVE-2023-35379 Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability

...

CVE-2023-35379

CVE-2023-35379 is a local privilege escalation affecting the Reliability Analysis Metrics Calculation Engine (RACEng) in Windows Server 2008 R2 SP1 (and related Server Core variants). The root cause is an elevation of privilege in RACEng, leading to total impact and a CVSS 3.1 score of 7.8 (High)...

CVE-2023-35379 Reliability Analysis Metrics Calculation Engine (RACEng) Elevation of Privilege Vulnerability

...

CVE-2023-36876

CVE-2023-36876 refers to a local-elevation-of-privilege vulnerability in Microsoft’s Reliability Analysis Metrics Calculation Engine (RACEng) / RacTask. The initial entry lists affected product scope as Microsoft Windows Server 2008 R2 SP1 (and related Server/Core variants) among other Windows Se...

CVE-2023-36876 Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability

...

QakBot Malware Operators Expand C2 Network with 15 New Servers

The operators associated with the QakBot aka QBot malware have set up 15 new command-and-control C2 servers as of late June 2023. The findings are a continuation of the malware's infrastructure analysis from Team Cymru, and arrive a little over two months after Lumen Black Lotus Labs revealed tha...

pcp bug fix and enhancement update

An update is available for pcp. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Performance Co-Pilot PCP is a suite of tools, services, and libraries for...

Reliability Analysis Metrics Calculation (RacTask) Elevation of Privilege Vulnerability

...

PT-2023-25732 · Unknown +1 · Reliability Analysis Metrics Calculation +1

Name of the Vulnerable Software and Affected Versions: Reliability Analysis Metrics Calculation RacTask affected versions not specified Description: The issue is related to an elevation-of-privilege vulnerability, which allows attackers to affect the system. No information is provided about the...

Microsoft Reliability Analysis Metrics Calculation Engine Security Vulnerability

Microsoft Reliability Analysis Metrics Calculation Engine is a reliability analysis metrics calculation tool from Microsoft Corporation USA. A security vulnerability exists in Microsoft Reliability Analysis Metrics Calculation Engine. An attacker could exploit the vulnerability to gain elevated...

CVE-2023-39523

ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible command injection vulnerability in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. In the...

Command injection

ScanCode.io is a server to script and automate software composition analysis with ScanPipe pipelines. Prior to version 32.5.1, the software has a possible command injection vulnerability in the docker fetch process as it allows to append malicious commands in the dockerreference parameter. In the...