4305 matches found
Microsoft Windows Print Spooler Components 安全漏洞
Print Spooler is a print background processing service that manages all local and network print queues and controls all print jobs.An elevation of privilege vulnerability exists in Microsoft Windows Print Spooler, which stems from improper privilege assignment in the application and can be...
Microsoft DWM Core Library 安全漏洞
Microsoft DWM Core Library is a core library. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which stems from the presence of improper privilege assignment in the application and can be exploited by an attacker to cause an elevation of privilege...
Microsoft Windows Kernel 安全漏洞
Microsoft Windows Kernel is the kernel of the Windows operating system from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows Kernel, which stems from improper privilege assignment in applications and can be exploited by attackers to cause an elevation ...
Microsoft Hyper-V 安全漏洞
Microsoft Windows Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization, Microsoft Windows Hyper-V has an elevation of privilege vulnerability that stems from improper privilege assignment in the application and...
Microsoft Windows DHCP Client 安全漏洞
Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in Microsoft Windows DHCP Client, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause an...
Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2462)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Amazon Linux 2 : golang, --advisory ALAS2-2022-1846 (ALAS-2022-1846)
The version of golang installed on the remote host is prior to 1.18.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1846 advisory. 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A...
UBUNTU-CVE-2022-3424
A use-after-free flaw was found in the Linux kernel’s SGI GRU driver in the way the first grufileunlockedioctl function is called by the user, where a fail pass occurs in the grucheckchipletassignment function. This flaw allows a local user to crash or potentially escalate their privileges on the...
The vulnerability of InspIRCd, related to pointer assignment errors, allows a hacker to trigger a service failure.
The vulnerability of InspIRCd relates to pointer arithmetic errors. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
EulerOS 2.0 SP8 : golang (EulerOS-SA-2022-2462)
According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat functi...
Hitachi Storage Plug-in for VMware vCenter 安全漏洞
Hitachi Storage Plug-in for VMware vCenter is a plug-in from Hitachi, Japan. It enables integrated management of Hitachie storage systems in vCenter. A security vulnerability exists in Hitachi Storage Plug-in for VMware vCenter version 04.8.0, which stems from an incorrect privilege assignment...
getOrCreatePosition doesn't work as expected
Lines of code Vulnerability details getOrCreatePosition doesn't work as expected Impact Function getOrCreatePosition doesn't assign any value to positions, it just return the value from some key, leading to incorrect expected values and wrong functionality Proof of Concept function...
PT-2022-6796 · Ceph +5 · Ceph +5
Name of the Vulnerable Software and Affected Versions: Ceph affected versions not specified Description: A privilege escalation flaw was found in Ceph, specifically in the Ceph-crash.service component. This issue allows a local attacker to escalate privileges to root in the form of a crash dump,...
Mass Assignment leads to Stored XSS
Description The application is vulnerable to mass assignment in the User object. A user is able to enable their own account and change their username. The username is not properly sanitized in the admin user overview, leading to a stored XSS attack. Proof of Concept Steps to reproduce: 1. Log in...
The vulnerability of the ioport hardware emulation software under QEMU, related to pointer swapping errors, allows a hacker to trigger a service failure.
The vulnerability of the ioport hardware emulation software under QEMU is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to trigger a service failure...
The vulnerability of the SCSI am53c974 adapter driver in the hardware emulation software QEMU allows a hacker to induce a service failure.
The vulnerability of the SCSI am53c974 adapter driver in the QEMU hardware emulation software is related to pointer assignment errors. Exploiting this vulnerability allows an attacker to cause a system failure...
The vulnerability of the Samba network communication software package, related to incorrect privilege assignment, allows a perpetrator to gain access to confidential data.
The vulnerability of the Samba networking communication package is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data remotely...
PT-2022-34252 · Linux · Linux Kernel
Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.4.211 Description: The issue is related to the assignment of scpi info in the arm scpi firmware. If the probe fails, scpi info should not be assigned. The actual impact and attack plausibility of this issue...
SUSE SLES15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2022:3291-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3291-1 advisory. The SUSE Linux Enterprise 15 LTSS kernel was updated to receive various security and bugfixes. The following security bugs were...
