2887 matches found
PT-2023-8367 · Ibm · Aix +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.2 through 7.3 Description: The issue is related to insufficient input validation in the AIX SMB client, which could allow a non-privileged local user to cause a denial of service. Recommendations: For IBM AIX versions 7.2...
SUSE CVE-2023-49343
Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...
SUSE CVE-2023-49345
Temporary data passed between application components by Budgie Extras Takeabreak applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...
DEBIAN-CVE-2023-49344
Temporary data passed between application components by Budgie Extras Window Shuffler applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present...
UBUNTU-CVE-2023-49343
Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...
Amazon Linux 2 : kernel (ALAS-2023-2359)
The version of kernel installed on the remote host is prior to 4.14.330-250.540. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2359 advisory. 2024-12-05: CVE-2023-52868 was added to this advisory. 2024-12-05: CVE-2023-52867 was added to this advisory...
kernel: Denial of service issue in az6027 driver in drivers/media/usb/dev-usb/az6027.c
A NULL pointer dereference flaw was found in the az6027 driver in drivers/media/usb/dev-usb/az6027.c in the Linux Kernel. The message from user space is not checked properly before transferring into the device. This flaw allows a local user to crash the system or potentially cause a denial of...
kernel: tap: tap_open(): correctly initialize socket uid next fix of i_uid to current_fsuid
A flaw was found in the Linux kernel's TUN/TAP functionality. This issue could allow a local user to bypass network filters and gain unauthorized access to some resources. The original patches fixing CVE-2023-1076 are incorrect or incomplete. The problem is that the following upstream commits -...
F5 Networks BIG-IP : RSRE Variant 3a vulnerability (K51801290)
The version of F5 Networks BIG-IP installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the K51801290 advisory. Systems with microprocessors utilizing speculative execution and that perform speculative reads of system registers may...
SUSE CVE-2015-3142
The kernel-invoked coredump processor in Automatic Bug Reporting Tool ABRT does not properly check the ownership of files before writing core dumps to them, which allows local users to obtain sensitive information by leveraging write permissions to the working directory of a crashed application...
SUSE CVE-2016-4446
The allowexecstack plugin for setroubleshoot allows local users to execute arbitrary commands by triggering an execstack SELinux denial with a crafted filename, related to the commands.getoutput function...
CVE-2023-34057
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine...
Privilege escalation
VMware Tools contains a local privilege escalation vulnerability. A malicious actor with local user access to a guest virtual machine may elevate privileges within the virtual machine...
PT-2023-6495 · Github · Github Enterprise Server
Name of the Vulnerable Software and Affected Versions: GitHub Enterprise Server affected versions not specified Description: The issue is related to incorrect permission assignment for files in the corporate version of GitHub Enterprise Server. This could allow an attacker to obtain the MySQL...
AZL-31320 CVE-2023-43785 affecting package libX11 for versions less than 1.8.7-1
A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system...
PT-2023-25369 · Ibm · Ibm Storage Protect For Virtual Environments +1
Name of the Vulnerable Software and Affected Versions: IBM Spectrum Protect Client and IBM Storage Protect for Virtual Environments versions 8.1.0.0 through 8.1.19.0 Description: The issue allows a local user to execute arbitrary code on the system using a specially crafted file, caused by a DLL...
CVE-2023-3335
Insertion of Sensitive Information into Log File vulnerability in Hitachi Ops Center Administrator on Linux allows local users to gain sensitive information.This issue affects Hitachi Ops Center Administrator: before 10.9.3-00...
Hitachi Ops Center Administrator Log Information Disclosure Vulnerability
Hitachi Ops Center Administrator is a management interface and tool for managing and monitoring Hitachi Hitachi storage devices from Hitachi, Ltd Hitachi, Japan. A log information disclosure vulnerability exists in Hitachi Ops Center Administrator versions prior to 10.9.3-00, which originates fro...
UBUNTU-CVE-2023-43785
A vulnerability was found in libX11 due to a boundary condition within the XkbReadKeySyms function. This flaw allows a local user to trigger an out-of-bounds read error and read the contents of memory on the system...