3476 matches found
CVE-2022-21946 suddoers configuration for cscreen not restrictive enough
A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory...
CVE-2022-21946
CVE-2022-21946 is a local privilege vulnerability in openSUSE Factory cscreen caused by an incorrect permission assignment in the sudoers configuration, letting any local user gain tty and dialout group privileges and manipulate running cscreen sessions. Affected: cscreen versions 1.2–1.3 and ear...
CVE-2022-21946 suddoers configuration for cscreen not restrictive enough
A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory...
CVE-2022-21945
CVE-2022-21945 affects openSUSE Factory cscreen (versions 1.2–1.3 and earlier). The root cause is an insecure temporary file handling that uses a fixed path (/tmp/cscreen.debug), enabling local attackers to cause DoS to cscreen and DoS to non-default systems. Practical impact is local, with avail...
CVE-2022-21945 cscreen: usage of fixed path /tmp/cscreen.debug
A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions...
CVE-2022-21945
A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions...
CVE-2021-46705 grub2-once uses fixed file name in /var/tmp
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2...
CVE-2021-46705
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2...
CVE-2021-46705
CVE-2021-46705 affects grub2 (grub-once) in SUSE Linux Enterprise Server 15 SP4 and openSUSE Factory. The issue is an Insecure Temporary File vulnerability that lets local attackers truncate arbitrary files via grub-once/grub2. Affected versions are grub2 prior to 2.06-150400.7.1 on SLE 15 SP4, a...
PT-2022-9137 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12 Description: The issue allows for a bypass of Factory Reset Protections, potentially leading to local escalation of privilege without requiring additional execution privileges. User interaction i...
CVE-2022-21945: Insecure Temporary File
A Insecure Temporary File vulnerability in cscreen of openSUSE Factory allows local attackers to cause DoS for cscreen and a system DoS for non-default systems. This issue affects: openSUSE Factory cscreen version 1.2-1.3 and prior versions...
CVE-2022-21946: Incorrect Permission Assignment for Critical Resource
A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory...
cscreen 安全漏洞
cscreen is an open source tool. Allows multiple consoles to be run in a single screen session. Ideal for monitoring and logging all serial consoles in a data center in a single screen instance. cscreen has a security vulnerability that allows a local attacker to cause a system DoS on cscreen on...
CVE-2021-46705: Insecure Temporary File
A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2...
CVE-2021-0957: Undefined Security Weakness
In NotificationStackScrollLayout of NotificationStackScrollLayout.java, there is a possible way to bypass Factory Reset Protections. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product:...
PT-2022-15196
Name of the Vulnerable Software and Affected Versions openSUSE Factory cscreen versions 1.2-1.3 and prior versions. Description A vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and...
CVE-2022-21946
A Incorrect Permission Assignment for Critical Resource vulnerability in the sudoers configuration in cscreen of openSUSE Factory allows any local users to gain the privileges of the tty and dialout groups and access and manipulate any running cscreen seesion. This issue affects: openSUSE Factory...
Siemens Polarion ALM
1. EXECUTIVE SUMMARY CVSS v3 6.5 ATTENTION: Exploitable remotely/low attack complexity Vendor: Siemens Equipment: Polarion ALM Vulnerability: Cross-site Scripting 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-22-069-08 Siemens Polarion ALM that...
Google Android 权限许可和访问控制问题漏洞
Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android, which originates in NotificationStackScrollLayout.java. NotificationStackScrollLayout has a method to bypass factory reset protection. An attacker could...