17542 matches found
CVE-2024-11220
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation...
CVE-2024-11220
CVE-2024-11220 affects Open Automation Software (OAS). A local, low-privilege user with credentials to the running OAS services can create and run an rdlx report file on the server , causing code in the rdlx to execute with SYSTEM privileges and perform privilege escalation. Reported impact align...
CVE-2024-11220 Open Automation Software Incorrect Execution-Assigned Permissions
A local low-level user on the server machine with credentials to the running OAS services can create and execute a report with an rdlx file on the server system itself. Any code within the rdlx file of the report executes with SYSTEM privileges, resulting in privilege escalation...
CVE-2024-42196
HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs...
CVE-2024-42196 HCL Launch is susceptible to Insertion of Sensitive Information into Log File vulnerability
HCL Launch stores potentially sensitive information in log files that could be read by a local user with access to HTTP request logs...
PT-2024-29791 · Hcl · Hcl Launch
Name of the Vulnerable Software and Affected Versions: HCL Launch affected versions not specified Description: The issue concerns HCL Launch storing potentially sensitive information in log files. This data could be accessed by a local user with permission to read HTTP request logs...
kernel: bpf: Fix overrunning reservations in ringbuf
An out-of-bounds memory access flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to crash the system...
kernel: x86/mm: Randomize per-cpu entry area
A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...
kernel: bpf: Fix overrunning reservations in ringbuf
An out-of-bounds memory access flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to crash the system...
kernel: bpf: Fix overrunning reservations in ringbuf
An out-of-bounds memory access flaw was found in the Linux kernel’s BPF subsystem. This flaw allows a local user to crash the system...
kernel: x86/mm: Randomize per-cpu entry area
A possible unauthorized memory access flaw was found in the Linux kernel cpuentryarea mapping of X86 CPU data to memory, where a user may guess the location of exception stacks or other important data. This issue could allow a local user to gain access to some important data with expected locatio...
Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2012-4141)
Directory traversal vulnerability in the CLI parser in Cisco NX-OS allows local users to create arbitrary script files via a relative pathname in the file name parameter, aka Bug IDs CSCua71557 and CSCua71551. This plugin only works with Tenable.ot. Please visit...
Cisco NX-OS Path Traversal (CVE-2012-4131)
Directory traversal vulnerability in tar in Cisco NX-OS allows local users to access arbitrary files via crafted command-line arguments, aka Bug IDs CSCty07157, CSCty07159, CSCty07162, and CSCty07164. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot...
Cisco NX-OS OS Command Injection (CVE-2012-4075)
Cisco NX-OS allows local users to gain privileges and execute arbitrary commands via shell metacharacters in unspecified command parameters, aka Bug IDs CSCtf19827 and CSCtf27788. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...
Cisco NX-OS Permissions, Privileges, and Access Controls (CVE-2011-2569)
Cisco Nexus OS aka NX-OS 4.2 and 5.0 and Cisco Unified Computing System with software 1.4 and 2.0 do not properly restrict command-line options, which allows local users to gain privileges via unspecified vectors, aka Bug IDs CSCtf40008, CSCtg18363, CSCtr44645, CSCts10195, and CSCts10188. This...
Cisco NX-OS Improper Input Validation (CVE-2012-4122)
The CLI parser in Cisco NX-OS allows local users to bypass intended access restrictions, and overwrite or create arbitrary files, via shell output redirection, aka Bug IDs CSCts56672 and CSCts56669. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot f...
CVE-2024-25036
IBM Cognos Controller 11.0.0 and 11.0.1 could allow an authenticated user with local access to bypass security allowing users to circumvent restrictions imposed on input fields...
Intelligent Security System SecurOS Enterprise 11 Unquoted Service Path
Exploit Title: Intelligent Security System SecurOS Enterprise v11 - Unquoted Service Path Date: 2024-11-25 Exploit Author: Milad Karimi Ex3ptionaL Contact: [email protected] t.me/Ci3c0 Zone-H: www.zone-h.org/archive/notifier=Ex3ptionaL MiRROR-H: https://mirror-h.org/search/hacker/49626/ Vend...
WithSecure多款产品 安全漏洞
WithSecure Elements Agent and others are products of the Finnish company WithSecure.WithSecure Elements Agent is a cloud-native endpoint protection system.WithSecure Managed Detection and Response WithSecure WithSecure Managed Detection and Response MDR is a managed response and detection...
Fedora 41 : tuned (2024-e457d67157)
The remote Fedora 41 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2024-e457d67157 advisory. This is new version that fixes CVE-2024-52336 and CVE-2024-52337 which allowed privileged execution by non-privileged active local user and log...