Lucene search
+L

6400 matches found

OSV
OSV
added 2018/06/20 6:29 p.m.6 views

UBUNTU-CVE-2018-10841

glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool,...

8.8CVSS6.8AI score0.01284EPSS
SaveExploits0References6
NVD
NVD
added 2018/06/20 6:29 p.m.20 views

CVE-2018-10841

glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool,...

8.8CVSS7.7AI score0.01284EPSS
SaveExploits0References6
OSV
OSV
added 2018/06/20 6:29 p.m.4 views

DEBIAN-CVE-2018-10841

glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool,...

8.8CVSS7.2AI score0.01284EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2018/06/20 6:0 p.m.38 views

CVE-2018-10841

glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool,...

6.6CVSS8.7AI score0.01284EPSS
SaveExploits0References6
CVE
CVE
added 2018/06/20 6:0 p.m.127 views

CVE-2018-10841

GlusterFS on server nodes is vulnerable to privilege escalation via an authenticated TLS client that uses gluster CLI --remote-host to add itself to the trusted storage pool and perform privileged operations (e.g., managing volumes). The description specifies the root cause as a trust-pool escala...

8.8CVSS8.6AI score0.01284EPSS
SaveExploits0References6Affected Software1
Debian CVE
Debian CVE
added 2018/06/20 6:0 p.m.72 views

CVE-2018-10841

glusterfs is vulnerable to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to trusted storage pool,...

8.8CVSS7.8AI score0.01284EPSS
SaveExploits0
RedHat Linux
RedHat Linux
added 2018/06/20 10:33 a.m.5 views

glusterfs: access trusted peer group via remote-host command

A flaw was found in glusterfs which can lead to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to...

8.8CVSS7.3AI score0.01284EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2018/06/20 10:30 a.m.9 views

glusterfs: access trusted peer group via remote-host command

A flaw was found in glusterfs which can lead to privilege escalation on gluster server nodes. An authenticated gluster client via TLS could use gluster cli with --remote-host command to add it self to trusted storage pool and perform privileged gluster operations like adding other machines to...

8.8CVSS7.3AI score0.01284EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2018/06/20 12:0 a.m.5 views

PT-2018-10135 · Red Hat +2 · Glusterfs +2

Name of the Vulnerable Software and Affected Versions: glusterfs affected versions not specified Description: The issue allows for privilege escalation on gluster server nodes. An authenticated gluster client using TLS can exploit this by utilizing the gluster cli with the --remote-host command...

8.8CVSS6.7AI score0.05549EPSS
SaveExploits1References70
Metasploit
Metasploit
added 2018/06/18 4:41 p.m.68 views

MS17-010 EternalBlue SMB Remote Windows Kernel Pool Corruption for Win8+

EternalBlue exploit for Windows 8, Windows 10, and 2012 by sleepya The exploit might FAIL and CRASH a target system depended on what is overwritten The exploit support only x64 target Tested on: - Windows 2012 R2 x64 - Windows 8.1 x64 - Windows 10 Pro Build 10240 x64 - Windows 10 Enterprise...

7.2AI score
SaveExploits0
IBM Security Bulletins
IBM Security Bulletins
added 2018/06/16 7:49 p.m.15 views

Security Bulletin: Vulnerabilities in the GSKit component of Transformation Extender (CVE-2016-0201, CVE-2015-7421, CVE-2015-7420)

Summary Vulnerabilities have been addressed in the GSKit component of Transformation Extender. Vulnerability Details CVEID: CVE-2016-0201 DESCRIPTION: IBM GSKit could allow a remote attacker to obtain sensitive information, caused by a MD5 collision. An attacker could exploit this vulnerability t...

5.9CVSS0.2AI score0.02032EPSS
SaveExploits0Affected Software1
Citrix
Citrix
added 2018/06/14 12:0 a.m.12 views

Error: "Cannot Complete Your Request" Due to Citrix Delivery Services Authentication App Pool Misconfiguration on StoreFront

The following error is displayed due to Citrix delivery services authentication app pool misconfiguration on StoreFront: Cannot Complete Your Request...

7.3AI score
SaveExploits0
OSV
OSV
added 2018/06/08 2:29 p.m.7 views

CVE-2018-10358

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x2200B4 in the TMWFP driver. An attacker must first obtain the ability to...

6.3CVSS6AI score0.00363EPSS
SaveExploits0References2
OSV
OSV
added 2018/06/08 2:29 p.m.2 views

CVE-2018-10359

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x220078 in the TMWFP driver. An attacker must first obtain the ability to...

6.3CVSS6AI score
SaveExploits0References2
NVD
NVD
added 2018/06/08 2:29 p.m.27 views

CVE-2018-10359

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x220078 in the TMWFP driver. An attacker must first obtain the ability to...

6.3CVSS6.8AI score0.00363EPSS
SaveExploits0References2
NVD
NVD
added 2018/06/08 2:29 p.m.43 views

CVE-2018-10358

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x2200B4 in the TMWFP driver. An attacker must first obtain the ability to...

6.3CVSS6.8AI score0.00363EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/06/08 2:0 p.m.50 views

CVE-2018-10358

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x2200B4 in the TMWFP driver. An attacker must first obtain the ability to...

7.5AI score0.00363EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2018/06/08 2:0 p.m.37 views

CVE-2018-10505

A pool corruption privilege escalation vulnerability in Trend Micro OfficeScan 11.0 SP1 and XG could allow a local attacker to escalate privileges on vulnerable installations due to a flaw within the processing of IOCTL 0x220008 in the TMWFP driver. An attacker must first obtain the ability to...

7.5AI score0.00363EPSS
SaveExploits0References2
Zero Day Initiative
Zero Day Initiative
added 2018/06/07 12:0 a.m.26 views

Trend Micro OfficeScan TMWFP driver Pool Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro OfficeScan. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

5.4CVSS3.1AI score0.00363EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
added 2018/06/07 12:0 a.m.30 views

Trend Micro OfficeScan TMWFP driver Pool Corruption Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on vulnerable installations of Trend Micro OfficeScan. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

5.4CVSS3.1AI score0.00363EPSS
SaveExploits0References1
Rows per page
Query Builder