MobileTrans 安全漏洞

MobileTrans is one of the best mobile data transfer apps from MobileTrans with the fastest cross-platform transfer speeds between iOS and Android. A security vulnerability exists in MobileTrans version v4.0.11, which stems from the presence of a weak service privilege vulnerability that allows a...

CVE-2023-20880

VMware Aria Operations contains a privilege escalation vulnerability. A malicious actor with administrative access to the local system can escalate privileges to 'root'...

May 9, 2023—KB5026370 (OS Build 20348.1726)

None None...

ManageEngine ADManager Plus ChangePasswordAction Authenticated Command Injection

ManageEngine ADManager Plus prior to build 7181 is vulnerable to an authenticated command injection due to insufficient validation of user input when performing the ChangePasswordAction function before passing it into a string that is later used as an OS command to execute. By making a POST reque...

April 11, 2023—KB5025239 (OS Build 22621.1555)

None None...

LAPS : Randomizing Local Admin Passwords in Non-persistent Environments

Use LAPS inLocal Admin Passwords for Non-persistent Environments...

K31440025: OpenSSH vulnerability CVE-2016-10009

Security Advisory Description Untrusted search path vulnerability in ssh-agent.c in ssh-agent in OpenSSH before 7.4 allows remote attackers to execute arbitrary local PKCS11 modules by leveraging control over a forwarded agent-socket. CVE-2016-10009 Impact Running the ssh-agent program requires a...

SUSE CVE-2007-5848

Buffer overflow in CUPS in Apple Mac OS X 10.4.11 allows local admin users to execute arbitrary code via a crafted URI to the CUPS service...

Palo Alto Networks Cortex XDR 安全漏洞

Palo Alto Networks Cortex XDR is an extended detection and response platform that natively integrates network, endpoint, cloud, and third-party data from Palo Alto Networks, USA. A security vulnerability exists in the Palo Alto Networks Cortex XDR agent that originates from a local system...

CVE-2023-0599 Rapid7 Metasploit Pro Stored XSS

Rapid7 Metasploit Pro versions 4.21.2 and lower suffer from a stored cross site scripting vulnerability, due to a lack of JavaScript request string sanitization. Using this vulnerability, an authenticated attacker can execute arbitrary HTML and script code in the target browser against another...

CVE-2022-32482

Dell BIOS contains an improper input validation vulnerability. A local authenticated malicious user with admin privileges may potentially exploit this vulnerability in order to modify a UEFI variable...

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, Inc. A security vulnerability exists in Dell BIOS that stems from an incorrect input validation vulnerability that could be exploited by a malicious, locally authenticated user with administrator privileges...

CVE-2023-0221

Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program...

Trellix Application and Change Control 安全漏洞

Trellix Application and Change Control Trellix ACC is an application and change control program from American FireEye Trellix. A security vulnerability exists in Trellix Application and Change Control versions prior to 8.3.4, which stems from a vulnerability that allows a locally logged-in attack...

CVE-2023-0012

In SAP Host Agent Windows - versions 7.21, 7.22, an attacker who gains local membership to SAPLocalAdmin could be able to replace executables with a malicious file that will be started under a privileged account. Note that by default all user members of SAPLocaAdmin are denied the ability to logo...

CVE-2022-4326

Improper preservation of permissions vulnerability in Trellix Endpoint Agent xAgent prior to V35.31.22 on Windows allows a local user with administrator privileges to bypass the product protection to uninstall the agent via incorrectly applied permissions in the removal protection functionality...

Trellix Agent 安全漏洞

Trellix Agent is a client component of FireEye USA Trellix, Inc. provides secure communication between McAfee ePolicy Orchestrator McAfee ePO and hosted products. A security vulnerability exists in versions of Trellix Agent prior to V35.31.22, which stems from the fact that it allows a local user...

Avaya Aura Communication Manager 安全漏洞

Avaya Aura Communication Manager is a comprehensive software foundation for real-time voice and video interactions from Avaya USA. A security vulnerability exists in Avaya Aura Communication Manager versions 8.0.0.0 through 8.1.3.3, prior to 10.1.0.1, which originated from a vulnerability that...

CVE-2022-41748

A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention DLP module could allow a local attacker with administrative credentials to bypass certain elements of the product's anti-tampering mechanisms on affected installations. Please note: an attacker must first obtain...

CVE-2022-41748

A registry permissions vulnerability in the Trend Micro Apex One Data Loss Prevention DLP module could allow a local attacker with administrative credentials to bypass certain elements of the product's anti-tampering mechanisms on affected installations. Please note: an attacker must first obtain...