Fedora 39 : open-vm-tools (2023-86a50ffc72)

The remote Fedora 39 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-86a50ffc72 advisory. Security fixes for CVE-2023-34058 and CVE-2023-34059 Tenable has extracted the preceding description block directly from the Fedora security advisor...

Fedora 37 : open-vm-tools (2023-1ed0ec0035)

The remote Fedora 37 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2023-1ed0ec0035 advisory. Security fixes for CVE-2023-34058 and CVE-2023-34059 Tenable has extracted the preceding description block directly from the Fedora security advisor...

CVE-2023-46176

Affected software : IBM MQ Appliance 9.3 CD. Vulnerability : local elevation of privileges due to improper validation of security keys. Root cause : security keys validation flaw allows a local attacker to gain elevated privileges. Impact : attacker could obtain higher privileges on the system. E...

Amazon Linux 2 : open-vm-tools (ALAS-2023-2329)

The version of open-vm-tools installed on the remote host is prior to 12.3.0-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2023-2329 advisory. VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to escalate privileges...

Securepoint SSL VPN Client Security Vulnerability

Securepoint SSL VPN Client is an open source SSL VPN client for Windows. A security vulnerability exists in Securepoint SSL VPN Client versions prior to 2.0.40 that stems from a local elevation of privilege vulnerability in the installer during installation or repair...

Google Android 缓冲区错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that originates from a heap buffer overflow in Bluetooth, which can be exploited by an attacker to cause an elevation of privilege...

Google Android 安全漏洞

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to escalate privileges...

CVE-2022-3701

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges...

CVE-2022-3701

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges...

CVE-2022-3701

A privilege elevation vulnerability was reported in the Lenovo Vantage SystemUpdate plugin version 2.0.0.212 and earlier that could allow a local attacker to execute arbitrary code with elevated privileges...

CVE-2022-3701

CVE-2022-3701 describes a privilege-elevation flaw in the Lenovo Vantage SystemUpdate plugin, affected up to version 2.0.0.212. A local attacker could execute arbitrary code with elevated privileges. The issue affects the plugin’s ability to run with higher rights, enabling a potentially destruct...

CVE-2023-34058

VMware Tools contains a SAML token signature bypass vulnerability. A malicious actor that has been granted Guest Operation Privileges https://docs.vmware.com/en/VMware-vSphere/8.0/vsphere-security/GUID-6A952214-0E5E-4CCF-9D2A-90948FF643EC.html in a target virtual machine may be able to elevate...

PT-2023-13517 · Lenovo · Lenovo Vantage

Name of the Vulnerable Software and Affected Versions: Lenovo Vantage SystemUpdate plugin versions 2.0.0.212 and earlier Description: A privilege elevation issue was reported that could allow a local attacker to execute arbitrary code with elevated privileges. Recommendations: For versions...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A local elevation of privilege vulnerability exists in the Linux Kernel. The vulnerability exists in the 'perf' component, where the perfreadgroup function is called when the...

CVE-2021-26734 Junction Delete leading to elevation of privilege

Zscaler Client Connector Installer on Windows before version 3.4.0.124 improperly handled directory junctions during uninstallation. A local adversary may be able to delete folders in an elevated context...

CVE-2023-37537

An unquoted service path vulnerability in HCL AppScan Presence, deployed as a Windows service in HCL AppScan on Cloud ASoC, may allow a local attacker to gain elevated privileges...

Synaptics DisplayLink Graphics Code Issue Vulnerability

Synaptics DisplayLink Graphics is a graphics technology from Synaptics, Inc. Easily connect any display to any USB or Wi-Fi enabled computer. A security vulnerability exists in Synaptics DisplayLink Graphics 11.1 M1 and prior versions, which stems from an elevation of privilege vulnerability duri...

Microsoft Windows Multiple Vulnerabilities (KB5031356)

This host is missing an important security update according to Microsoft KB5031356 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...

CVE-2023-5450

An insufficient verification of data vulnerability exists in BIG-IP Edge Client Installer on macOS that may allow an attacker elevation of privileges during the installation process. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...