2032 matches found
CVE-2022-22445
An attacker that gains service access to the FSP POWER9 only or gains admin authority to a partition can compromise partition firmware...
CVE-2022-28373
Verizon 5G Home LVSKIHP InDoorUnit IDU 3.4.66.162 does not properly sanitize user-controlled parameters within the crtcreadpartition function of the crtcrpc JSON listener in /usr/lib/lua/luci/crtc.lua. A remote attacker on the local network can inject shell metacharacters to achieve remote code...
Ubuntu 16.04 ESM : util-linux vulnerability (USN-5478-1)
The remote Ubuntu 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5478-1 advisory. Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker...
USN-5478-1: util-linux vulnerability
Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker could possibly use this issue to cause denial of service by consuming all memory through a specially crafted MSDOS partition table...
USN-5478-1 util-linux vulnerability
Christian Moch and Michael Gruhn discovered that the libblkid library of util-linux did not properly manage memory under certain circumstances. A local attacker could possibly use this issue to cause denial of service by consuming all memory through a specially crafted MSDOS partition table...
CVE-2022-30788
A vulnerability was found in NTFS-3G. Incorrect validation of NTFS metadata can result in a heap-based buffer overflow when processing a crafted NTFS image file or partition...
Denial of Service (DoS)
Overview github.com/containrrr/shoutrrr/pkg/util is a notification library for gophers. Affected versions of this package are vulnerable to Denial of Service DoS via the util.PartitionMessage function. Exploiting this vulnerability is possible by sending exactly 2000, 4000, or 6000 characters...
MiniTool Partition Wizard Elevation of Privilege Vulnerability
MiniTool Partition Wizard is a partition manager for home and home office users from MiniTool Canada. v12.0 of MiniTool Partition Wizard contains an elevation of privilege vulnerability that stems from the application containing an unreferenced service path. An attacker could exploit this...
CVE-2022-29320
MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
CVE-2022-29320
MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
CVE-2022-29320
CVE-2022-29320 affects MiniTool Partition Wizard v12.0 and is caused by an unquoted service path, enabling local privilege escalation to SYSTEM. The provided documents consistently describe the issue as an elevation of privilege stemming from the unquoted service path; no explicit affected additi...
CVE-2022-29320
MiniTool Partition Wizard v12.0 contains an unquoted service path which allows attackers to escalate privileges to the system level...
MiniTool Partition Wizard 代码问题漏洞
MiniTool Partition Wizard is a partition manager for home and home office users from MiniTool Canada. v12.0 of MiniTool Partition Wizard contains an elevation of privilege vulnerability that stems from the application containing an unreferenced service path. An attacker could exploit this...
[SECURITY] Fedora 34 Update: slurm-21.08.8-2.fc34
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
[SECURITY] Fedora 36 Update: slurm-21.08.8-2.fc36
Slurm is an open source, fault-tolerant, and highly scalable cluster management and job scheduling system for Linux clusters. Components include machine status, partition management, job management, scheduling and accounting modules...
F5 BIG-IP log information leakage vulnerability
F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing, etc. F5 BIG-IP is vulnerable to log information disclosure, which could be exploited by an attacker to use or delete private keys by accessing a...
CVE-2022-28859
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts nethsm-safenet-install.sh and nethsm-thales-install.sh expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support EoTS are not...
CVE-2022-28859
On F5 BIG-IP 15.1.x versions prior to 15.1.5.1 and 14.1.x versions prior to 14.1.4.6, when installing Net HSM, the scripts nethsm-safenet-install.sh and nethsm-thales-install.sh expose the Net HSM partition password. Note: Software versions which have reached End of Technical Support EoTS are not...
The vulnerability of the Windows Partition Management Driver in the Windows operating system allows a hacker to gain increased privileges.
The vulnerability of the Windows Partition Management Driver in the operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2022-20074
In preloader partition, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege, for an attacker who has physical access to the device, with no additional execution privileges needed. User interaction is needed for exploitation. Patc...