Lucene search
+L

4700 matches found

OSV
OSV
added 2023/03/07 9:15 p.m.6 views

CVE-2023-20623

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559778; Issue ID: ALPS07559778...

6.4CVSS6.7AI score0.00067EPSS
SaveExploits0References1
NVD
NVD
added 2023/03/07 9:15 p.m.32 views

CVE-2023-20623

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559778; Issue ID: ALPS07559778...

6.4CVSS6.6AI score0.00067EPSS
SaveExploits0References1
Prion
Prion
added 2023/03/07 9:15 p.m.27 views

Privilege escalation

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559778; Issue ID: ALPS07559778...

3.4CVSS6.6AI score0.00067EPSS
SaveExploits0References1Affected Software2
Zero Day Initiative
Zero Day Initiative
added 2023/03/07 12:0 a.m.24 views

Parallels Desktop Toolgate Time-Of-Check Time-Of-Use Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgat...

7.5CVSS3.5AI score0.00405EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/07 12:0 a.m.41 views

CVE-2023-20623

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559778; Issue ID: ALPS07559778...

6.8AI score0.00067EPSS
SaveExploits0References1
CVE
CVE
added 2023/03/07 12:0 a.m.126 views

CVE-2023-20623

CVE-2023-20623 affects the Ion component in MediaTek-based systems. Root cause is improper locking that allows local privilege escalation without extra execution privileges and with no user interaction required. The CVSS metrics indicate a local attack vector, high complexity, and high privileges...

6.4CVSS6.6AI score0.00067EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2023/03/07 12:0 a.m.7 views

MediaTek 芯片 安全漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the ion module of the MediaTek chips, which stems from incorrect locking and may result in privilege escalation...

6.4CVSS6.4AI score0.00067EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/03/07 12:0 a.m.9 views

PT-2023-17492 · Ion · Ion

Name of the Vulnerable Software and Affected Versions: ion affected versions not specified Description: The issue is related to a possible escalation of privilege due to improper locking in ion. This could lead to local escalation of privilege with no additional execution privileges needed. User...

6.4CVSS6.4AI score0.00067EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2023/03/07 12:0 a.m.5 views

CVE-2023-20623

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07559778; Issue ID: ALPS07559778...

7.3AI score0.00067EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2023/03/01 4:23 p.m.61 views

CVE-2022-39228 Observable Response Discrepancy in vantage6

vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. vantage6 does not inform the user of wrong username/password combination if the username actually exists. This is an attempt to prevent bots from obtaining usernames. However, if a wrong password is...

5.3CVSS6.7AI score0.00591EPSS
SaveExploits0References4
OSV
OSV
added 2023/03/01 12:0 a.m.19 views

ASB-A-264209787

In ion, there is a possible escalation of privilege due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

6.4CVSS7.3AI score0.00067EPSS
SaveExploits0References1
OSV
OSV
added 2023/03/01 12:0 a.m.8 views

PUB-A-194783918

In MediaCodec.cpp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation...

7.8CVSS7.2AI score0.00078EPSS
SaveExploits0References2
OSV
OSV
added 2023/02/28 5:15 p.m.9 views

CVE-2023-20939

In multiple functions of looperbackedeventloop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8CVSS5.9AI score0.00072EPSS
SaveExploits0References1
Prion
Prion
added 2023/02/28 5:15 p.m.18 views

Input validation

In multiple functions of looperbackedeventloop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

4.3CVSS7.7AI score0.00072EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/28 12:0 a.m.6 views

CVE-2023-20939

In multiple functions of looperbackedeventloop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.8AI score0.00072EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2023/02/28 12:0 a.m.9 views

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from the US company Google. Google Android suffers from a security vulnerability that stems from incorrect locking that corrupts memory, which could be exploited by an attacker to cause a local privilege escalation without additional...

7.8CVSS7.4AI score0.00072EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/02/28 12:0 a.m.34 views

CVE-2023-20939

In multiple functions of looperbackedeventloop.cpp, there is a possible way to corrupt memory due to improper locking. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

7.9AI score0.00072EPSS
SaveExploits0References1
Code423n4
Code423n4
added 2023/02/27 12:0 a.m.13 views

Upgraded Q -> 3 from #460 [1677510923458]

Judge has assessed an item in Issue 460 as 3 risk. The relevant finding follows: Lines of code Vulnerability details Impact The safeTransferFrom function on the ClearingHouse is normally used when an OpenSea auction successfully ends and the required ERC20/WETH have been transferred to the...

6.9AI score
SaveExploits0
F5 Networks
F5 Networks
added 2023/02/21 7:28 p.m.47 views

K16389: Multiple MySQL vulnerabilities

Security Advisory Description CVE-2013-5908 Unspecified vulnerability in the MySQL Server component in Oracle MySQL 5.1.72 and earlier, 5.5.34 and earlier, and 5.6.14 and earlier allows remote attackers to affect availability via unknown vectors related to Error Handling. CVE-2014-0401 Unspecifie...

4CVSS5.7AI score0.0467EPSS
SaveExploits0Affected Software14
SUSE CVE
SUSE CVE
added 2023/02/15 6:0 a.m.7 views

SUSE CVE-2010-0285

gnome-screensaver 2.14.3, 2.22.2, 2.27.x, 2.28.0, and 2.28.3, when the X configuration enables the extend screen option, allows physically proximate attackers to bypass screen locking, access an unattended workstation, and view half of the GNOME desktop by attaching an external monitor...

5.6CVSS6.9AI score0.00307EPSS
SaveExploits0References4
Rows per page
Query Builder