Lucene search
K

1219 matches found

CNNVD
CNNVD
added 2022/10/11 12:0 a.m.3 views

Microsoft Hyper-V 安全漏洞

Microsoft Windows Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization, Microsoft Windows Hyper-V has an elevation of privilege vulnerability that stems from improper privilege assignment in the application and...

7.8CVSS8.8AI score0.00564EPSS
Exploits0References5
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.5 views

Microsoft Windows ALPC 竞争条件问题漏洞

Microsoft Windows ALPC is a process-to-process communication tool for high-speed messaging from Microsoft, Inc. An elevation of privilege vulnerability exists in Microsoft Windows ALPC, which stems from improper privilege assignment in the application and can be exploited by an attacker to cause ...

7CVSS6.9AI score0.00607EPSS
Exploits0References4
CNNVD
CNNVD
added 2022/10/11 12:0 a.m.10 views

Microsoft Windows 安全漏洞

Microsoft Windows is a set of operating systems for personal devices from Microsoft Corporation USA.An elevation of privilege vulnerability exists in the Microsoft Windows COM Event System Service, which stems from improper privilege assignment in applications and can be exploited by attackers to...

7.8CVSS6.9AI score0.01777EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2022/10/10 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for golang (EulerOS-SA-2022-2462)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.3CVSS9.1AI score0.02077EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2022/10/10 12:0 a.m.26 views

Amazon Linux 2 : golang, --advisory ALAS2-2022-1846 (ALAS-2022-1846)

The version of golang installed on the remote host is prior to 1.18.5-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2022-1846 advisory. 2023-05-11: CVE-2022-1996 has changed status to NOT AFFECTED for this package and has been removed from this advisory. A...

9.3CVSS7.2AI score0.03931EPSS
Exploits7References28
Tenable Nessus
Tenable Nessus
added 2022/10/09 12:0 a.m.30 views

EulerOS 2.0 SP8 : golang (EulerOS-SA-2022-2462)

According to the versions of the golang packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Go before 1.17.10 and 1.18.x before 1.18.2 has Incorrect Privilege Assignment. When called with a non-zero flags parameter, the Faccessat functi...

5.3CVSS7.1AI score0.02077EPSS
Exploits1References2
CNNVD
CNNVD
added 2022/10/04 12:0 a.m.4 views

Hitachi Storage Plug-in for VMware vCenter 安全漏洞

Hitachi Storage Plug-in for VMware vCenter is a plug-in from Hitachi, Japan. It enables integrated management of Hitachie storage systems in vCenter. A security vulnerability exists in Hitachi Storage Plug-in for VMware vCenter version 04.8.0, which stems from an incorrect privilege assignment...

8.8CVSS7.4AI score0.00461EPSS
Exploits0References4
BDU FSTEC
BDU FSTEC
added 2022/09/19 12:0 a.m.3 views

The vulnerability of the Samba network communication software package, related to incorrect privilege assignment, allows a perpetrator to gain access to confidential data.

The vulnerability of the Samba networking communication package is related to the improper assignment of privileges. Exploiting this vulnerability allows a malicious actor to gain access to confidential data remotely...

4.3CVSS6.4AI score0.01492EPSS
Exploits0References9Affected Software3
BDU FSTEC
BDU FSTEC
added 2022/09/07 12:0 a.m.2 views

The vulnerability of the Trend Micro HouseCall antivirus protection tool for home networks relates to improper privilege assignment, allowing attackers to elevate their privileges.

The vulnerability of the Trend Micro HouseCall antivirus protection tool relates to the improper assignment of privileges. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

10CVSS7.2AI score0.00205EPSS
Exploits0References3Affected Software1
ATTACKERKB
ATTACKERKB
added 2022/08/05 9:15 a.m.1 views

CVE-2022-2626

Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6...

9.1CVSS7.1AI score0.01035EPSS
Exploits1References3
NVD
NVD
added 2022/08/05 9:15 a.m.12 views

CVE-2022-2626

Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6...

9.1CVSS0.01035EPSS
Exploits1References2
Prion
Prion
added 2022/08/05 9:15 a.m.13 views

Design/Logic Flaw

Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6...

5.8CVSS7AI score0.01035EPSS
Exploits1References2Affected Software1
Cvelist
Cvelist
added 2022/08/05 8:15 a.m.14 views

CVE-2022-2626 Incorrect Privilege Assignment in hestiacp/hestiacp

Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6...

9.1CVSS7.3AI score0.01035EPSS
Exploits1References2
OSV
OSV
added 2022/08/05 8:15 a.m.17 views

CVE-2022-2626 Incorrect Privilege Assignment in hestiacp/hestiacp

Incorrect Privilege Assignment in GitHub repository hestiacp/hestiacp prior to 1.6.6...

9.1CVSS8.4AI score0.01035EPSS
Exploits1References4
CNNVD
CNNVD
added 2022/08/05 12:0 a.m.3 views

hestiacp 安全漏洞

hestiacp is a lightweight and powerful control panel for modern networks. A security vulnerability exists in hestiacp versions prior to 1.6.6 that stems from incorrect privilege assignment...

9.1CVSS7.9AI score0.01035EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2022/07/12 12:0 a.m.75 views

Oracle Linux 8 : go-toolset:ol8addon (ELSA-2022-17956)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-17956 advisory. go-toolset 1.18.3-1 - Update to golang 1.18.3 golang 1.18.3-1.0.1 - Rebase to 1.18.3 by adding upstream patches to the 1.18.0 openssl-fips - Modify...

7.8CVSS7.4AI score0.05292EPSS
Exploits4References9
CNVD
CNVD
added 2022/07/07 12:0 a.m.15 views

HUAWEI HarmonyOS security module authorization issue vulnerability

HUAWEI HarmonyOS is an operating system from Huawei, China HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from an incorrect privilege assignment in the application security module, which could be exploited by an attacker to cause the device to...

9.1CVSS4.7AI score0.00548EPSS
Exploits0References1
CNNVD
CNNVD
added 2022/07/05 12:0 a.m.3 views

HUAWEI HarmonyOS 安全漏洞

HUAWEI HarmonyOS is an operating system from Huawei, China HUAWEI. HUAWEI HarmonyOS version 2.0 contains an authorization issue vulnerability that stems from an incorrect privilege assignment in the application security module, which could be exploited by an attacker to cause the device to...

9.1CVSS5.7AI score0.00548EPSS
Exploits0References5
Tenable Nessus
Tenable Nessus
added 2022/07/01 12:0 a.m.73 views

Oracle Linux 8 : go-toolset:ol8 (ELSA-2022-5337)

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2022-5337 advisory. delve 1.7.2-1.0.1 - Disable DWARF compression which has issues Alex Burmashev 1.7.2-1 - Rebase to 1.7.2 - Related: rhbz2014088 golang 1.17.10-1 - Rebas...

7.5CVSS7.3AI score0.05292EPSS
Exploits2References4
BDU FSTEC
BDU FSTEC
added 2022/06/29 12:0 a.m.1 views

The vulnerability of the authentication mechanism for software administrators of the ImageCast X device for marking ballots allows a perpetrator to escalate their privileges.

The vulnerability of the authentication mechanism for software administrators of the ImageCast X labeling device is related to privilege assignment errors. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.8CVSS7.2AI score0.00277EPSS
Exploits0References3Affected Software1
Rows per page
Query Builder