CVE-2017-20002

The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH hence bypassing PAM's nulloksecure configuration. Thi...

CVE-2017-20002

The Debian shadow package before 1:4.5-1 for Shadow incorrectly lists pts/0 and pts/1 as physical terminals in /etc/securetty. This allows local users to login as password-less users even if they are connected by non-physical means such as SSH hence bypassing PAM's nulloksecure configuration. Thi...

guava: local information disclosure via temporary directory created with unsafe permissions

A flaw was found in Guava that creates temporary directories with default permissions similar to /tmp. This issue may allow local users access, possibly permitting information exposure...

guava: local information disclosure via temporary directory created with unsafe permissions

A flaw was found in Guava that creates temporary directories with default permissions similar to /tmp. This issue may allow local users access, possibly permitting information exposure...

NewStart CGSL MAIN 6.02 : util-linux Vulnerability (NS-SA-2021-0055)

The remote NewStart CGSL host, running version MAIN 6.02, has util-linux packages installed that are affected by a vulnerability: - Blkid in util-linux before 2.26rc-1 allows local users to execute arbitrary code. CVE-2014-9114 Note that Nessus has not tested for this issue but has instead relied...

NewStart CGSL CORE 5.04 / MAIN 5.04 : libuser Multiple Vulnerabilities (NS-SA-2021-0044)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has libuser packages installed that are affected by multiple vulnerabilities: - libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which...

EulerOS Virtualization 3.0.2.6 : tboot (EulerOS-SA-2021-1452)

According to the version of the tboot package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows...

NewStart CGSL MAIN 4.06 : sudo Multiple Vulnerabilities (NS-SA-2021-0001)

The remote NewStart CGSL host, running version MAIN 4.06, has sudo packages installed that are affected by multiple vulnerabilities: - In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. pwfeedback is a...

Oracle Linux 7 : Unbreakable Enterprise kernel (ELSA-2021-9084)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-9084 advisory. - ovl: verify permissions in ovlpathopen Miklos Szeredi Orabug: 32435220 CVE-2020-16120 - ovl: switch to mounter creds in readdir Miklos Szeredi Orabug...

Huawei EulerOS: Security Advisory for util-linux (EulerOS-SA-2021-1524)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS Virtualization 3.0.6.6 : tboot (EulerOS-SA-2021-1521)

According to the version of the tboot package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows...

CVE-2021-26563

Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors...

CVE-2021-26563

Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors...

Authorization

Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors...

CVE-2021-26563

CVE-2021-26563 affects Synology DiskStation Manager (DSM) with the synoagentregisterd component, prior to DSM 6.2.4-25553. The root cause is an incorrect/improper access control that allows local users to execute arbitrary code via unspecified vectors, potentially enabling root access. In TALOS-2...

CVE-2021-26563

Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors...

EulerOS 2.0 SP2 : irssi (EulerOS-SA-2021-1306)

According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow...

CVE-2020-24908

CVE-2020-24908 affects Checkmk before 1.6.0p17. A Trojan horse shell script in %PROGRAMDATA%\checkmk\agent\local allows local users to escalate to SYSTEM privileges. Root cause: manipulation of a local agent script executed with high privileges. Impact: local privilege escalation to SYSTEM. Remed...

CVE-2020-12372

Unchecked return value in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-9453

In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...