Lucene search
+L

535 matches found

zdt
zdt
•added 2022/01/27 12:00 a.m.•1405 views

PolicyKit-1 0.105-31 - Privilege Escalation Exploit

Exploit Title: PolicyKit-1 0.105-31 - Privilege Escalation Exploit Author: Lance Biggerstaff Original Author: ryaagard https://github.com/ryaagard Github Repo: https://github.com/ryaagard/CVE-2021-4034 References: https://www.qualys.com/2022/01/25/cve-2021-4034/pwnkit.txt Description: The exploit...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits158
Veracode
Veracode
•added 2022/01/26 5:22 a.m.•109 views

Privilege Escalation

policykit is vulnerable to privilege escalation.The vulnerability allows any unprivileged user to gain root privileges on the vulnerable host...

7.8CVSS7AI score0.94921EPSS
SaveExploits158References26Affected Software7
Tenable Nessus
Tenable Nessus
•added 2022/01/26 12:00 a.m.•57 views

Ubuntu 14.04 ESM / 16.04 ESM : PolicyKit vulnerability (USN-5252-2)

The remote Ubuntu 14.04 ESM / 16.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-5252-2 advisory. USN-5252-1 fixed a vulnerability in policykit-1. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Tenable has...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits158References2
Tenable Nessus
Tenable Nessus
•added 2022/01/26 12:00 a.m.•154 views

Ubuntu 18.04 LTS / 20.04 LTS : PolicyKit vulnerability (USN-5252-1)

The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-5252-1 advisory. It was discovered that the PolicyKit pkexec tool incorrectly handled command-line arguments. A local attacker could use this issue to escalate...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits158References2
OpenVAS
OpenVAS
•added 2022/01/26 12:00 a.m.•52 views

Ubuntu: Security Advisory (USN-5252-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.94921EPSS
SaveExploits158References4
OpenVAS
OpenVAS
•added 2022/01/26 12:00 a.m.•37 views

Debian: Security Advisory (DSA-5059-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7AI score0.94921EPSS
SaveExploits158References7
Ubuntu
Ubuntu
•added 2022/01/25 7:30 p.m.•266 views

USN-5252-2: PolicyKit vulnerability

USN-5252-1 fixed a vulnerability in policykit-1. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the PolicyKit pkexec tool incorrectly handled command-line arguments. A local attacker could use this issue t...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits158
osv_usn
osv_usn
•added 2022/01/25 7:30 p.m.•23 views

USN-5252-2 policykit-1 vulnerability

USN-5252-1 fixed a vulnerability in policykit-1. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that the PolicyKit pkexec tool incorrectly handled command-line arguments. A local attacker could use this issue t...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits158References2
osv_usn
osv_usn
•added 2022/01/25 5:58 p.m.•18 views

USN-5252-1 policykit-1 vulnerability

It was discovered that the PolicyKit pkexec tool incorrectly handled command-line arguments. A local attacker could use this issue to escalate privileges to an administrator...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits158References2
Ubuntu
Ubuntu
•added 2022/01/25 5:58 p.m.•215 views

USN-5252-1: PolicyKit vulnerability

It was discovered that the PolicyKit pkexec tool incorrectly handled command-line arguments. A local attacker could use this issue to escalate privileges to an administrator...

7.8CVSS6.9AI score0.94921EPSS
SaveExploits158
Debian
Debian
•added 2022/01/25 5:55 p.m.•94 views

[SECURITY] [DLA 2899-1] policykit-1 security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-2899-1 [email protected] https://www.debian.org/lts/security/ Salvatore Bonaccorso January 25, 2022 https://wiki.debian.org/LTS -...

7.8CVSS6.7AI score0.94921EPSS
SaveExploits158
Debian
Debian
•added 2022/01/25 5:46 p.m.•134 views

[SECURITY] [DSA 5059-1] policykit-1 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5059-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 25, 2022 https://www.debian.org/security/faq -...

7.8CVSS6.7AI score0.94921EPSS
SaveExploits158
osv_dla
osv_dla
•added 2022/01/25 12:00 a.m.•55 views

DLA-2899-1 policykit-1 - security update

Bulletin has no description...

7.8CVSS6.8AI score0.94921EPSS
SaveExploits158
osv_dsa
osv_dsa
•added 2022/01/25 12:00 a.m.•99 views

DSA-5059-1 policykit-1 - security update

Bulletin has no description...

7.8CVSS6.8AI score0.94921EPSS
SaveExploits158
Debian
Debian
•added 2022/01/21 3:10 p.m.•77 views

[SECURITY] [DSA 5052-1] usbview security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5052-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 21, 2022 https://www.debian.org/security/faq -...

7.8CVSS7.5AI score0.00504EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/01/21 12:00 a.m.•19 views

USBView Access Control Vulnerability

USBView is a USB viewer for Linux. An access control error vulnerability exists in USBView that stems from certain Polkit settings in the product that disable privilege authentication. An attacker can execute arbitrary code as root with the -gtk-module option. The following products and versions...

7.8CVSS7.7AI score0.00504EPSS
SaveExploits1References11
Veracode
Veracode
•added 2021/06/04 10:46 p.m.•57 views

Denial Of Service (DoS)

policykit-1 is vulnerable to denial of service. The vulnerability exists due to the system unable to get a unique uid and pid of the process and it cannot verify the privileges of the requesting process...

7.8CVSS7.6AI score0.23708EPSS
SaveExploits39References5Affected Software6
OpenVAS
OpenVAS
•added 2021/06/04 12:00 a.m.•62 views

Ubuntu: Security Advisory (USN-4980-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.7AI score0.23708EPSS
SaveExploits39References4
osv_usn
osv_usn
•added 2021/06/03 10:51 a.m.•17 views

USN-4980-1 policykit-1 vulnerability

Kevin Backhouse discovered that polkit incorrectly handled errors in the polkitsystembusnamegetcredssync function. A local attacker could possibly use this issue to escalate privileges...

7.8CVSS7.6AI score0.23708EPSS
SaveExploits39References2
Ubuntu
Ubuntu
•added 2021/06/03 10:51 a.m.•290 views

USN-4980-1: polkit vulnerability

Kevin Backhouse discovered that polkit incorrectly handled errors in the polkitsystembusnamegetcredssync function. A local attacker could possibly use this issue to escalate privileges...

7.8CVSS7.6AI score0.23708EPSS
SaveExploits39
Rows per page
Query Builder