16182 matches found
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
In cPanel before 98.0.1, /scripts/cpanconfig performs unsafe operations on files SEC-589...
CVE-2021-38586
CVE-2021-38586 affects cPanel prior to 98.0.1. The issue is in /scripts/cpan_config, performing unsafe operations on files (SEC-589). The NVD metrics show CVSSv2/2.0: Low (2.1) with local access; CVSSv3.1/3.1: Medium (4.4) with local access, high integrity impact. Exploitation details or remediat...
Windows Print Spooler Remote Code Execution Vulnerability
A remote code execution vulnerability exists when the Windows Print Spooler service improperly performs privileged file operations. An attacker who successfully exploited this vulnerability could run arbitrary code with SYSTEM privileges. An attacker could then install programs; view, change, or...
QEMU: msix: OOB access during mmio operations may lead to DoS
An out-of-bounds access flaw was found in the Message Signalled Interrupt MSI-X device support of QEMU. This issue occurs while performing MSI-X mmio operations when a guest sent address goes beyond the mmio region. A guest user or process may use this flaw to crash the QEMU process resulting in ...
hw: Special Register Buffer Data Sampling (SRBDS)
A new domain bypass transient execution attack known as Special Register Buffer Data Sampling SRBDS has been found. This flaw allows data values from special internal registers to be leaked by an attacker able to execute code on any core of the CPU. An unprivileged, local attacker can use this fl...
esc bug fix and enhancement update
The esc packages contain the Enterprise Security Client ESC, which allows the user to manage security smart cards. The primary function of the tool is to enroll smart cards, so that they can be used for common cryptographic operations, such as to secure e-mail and website access. Bug Fixes and...
ALBA-2021:3068 esc bug fix and enhancement update
The esc packages contain the Enterprise Security Client ESC, which allows the user to manage security smart cards. The primary function of the tool is to enroll smart cards, so that they can be used for common cryptographic operations, such as to secure e-mail and website access. Bug Fixes and...
CVE-2021-33721
A vulnerability has been identified in SINEC NMS All versions V1.0 SP2. The affected application incorrectly neutralizes special elements when creating batch operations which could lead to command injection. An authenticated remote attacker with administrative privileges could exploit this...
CVE-2021-33721
A vulnerability has been identified in SINEC NMS All versions V1.0 SP2. The affected application incorrectly neutralizes special elements when creating batch operations which could lead to command injection. An authenticated remote attacker with administrative privileges could exploit this...
WordPress Workreap theme Access Control Error Vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An access control error vulnerability exists in WordPress Workreap theme versions prior to 2.2.2, which stems...
Siemens Simatic Improper Restriction of Operations within the Bounds of a Memory Buffer
A vulnerability has been identified in SIMATIC Drive Controller family All versions V2.9.2, SIMATIC ET 200SP Open Controller CPU 1515SP PC incl. SIPLUS variants All versions, SIMATIC ET 200SP Open Controller CPU 1515SP PC2 incl. SIPLUS variants All versions, SIMATIC S7-1200 CPU family incl. SIPLU...
KLA12256 PE vulnerability in Microsoft System Center
An elevation of privilege vulnerability was found in Microsoft System Center. Malicious users can exploit this vulnerability to gain privileges. Original advisories CVE-2021-34471 Related products Microsoft-System-Center-Operations-Manager CVE list CVE-2021-34471 unknown Solution Install necessar...
hw: Special Register Buffer Data Sampling (SRBDS)
A new domain bypass transient execution attack known as Special Register Buffer Data Sampling SRBDS has been found. This flaw allows data values from special internal registers to be leaked by an attacker able to execute code on any core of the CPU. An unprivileged, local attacker can use this fl...
Authorization
The Workreap WordPress theme before 2.2.2 had several AJAX actions missing authorization checks to verify that a user was authorized to perform critical operations such as modifying or deleting objects. This allowed a logged in user to modify or delete objects belonging to other users on the site...
hw: Special Register Buffer Data Sampling (SRBDS)
A new domain bypass transient execution attack known as Special Register Buffer Data Sampling SRBDS has been found. This flaw allows data values from special internal registers to be leaked by an attacker able to execute code on any core of the CPU. An unprivileged, local attacker can use this fl...
CVE-2020-36468
The CVE-2020-36468 entry concerns the Rust crate cgc . The vulnerability is centered on the function Ptr::write , which performs non-atomic writes to the underlying pointer. Several connected records (e.g., RH:CVE-2020-36468, NVD entry, OSV advisories) describe this as a potential data race when ...