WordPress 安全漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. An elevation of privilege vulnerability exists in the ProfilePress plugin for WordPress versions 3.0...

SUSE-SU-2021:2208-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP2 RT kernel was updated to receive various security and bugfixes. The following security bugs were fixed: - CVE-2021-33200: Enforcing incorrect limits for pointer arithmetic operations by the BPF verifier could be abused to perform out-of-bounds reads and writes in...

Vulnerability fixed in VMware products

A vulnerability has been fixed in VMware products. The vulnerability allows a malicious party to obtain elevated privileges obtain in a Windows guest system. VMware has released updates to fix the vulnerability. More information can be found on the page below:...

SerenityOS Directory Traversal Vulnerability

SerenityOS is a graphical Unix-like operating system for x86 computers. A directory traversal vulnerability exists in tar/unzip in versions prior to SerenityOS commit 3844e8569689dd476064a0759d704bc64fb3ca2c. An attacker could exploit this vulnerability to achieve command execution or elevation o...

Cisco AnyConnect Posture (HostScan) Security Service CVE-2021-1366 Bypass

1. Advisory Information Title: Cisco AnyConnect Posture HostScan Security Service CVE-2021-1366 Bypass Advisory ID: CORE-2021-0002 Advisory URL: https://www.coresecurity.com/core-labs/advisories/cisco-anyconnect-posture-hostscan-security-service-bypass Date published: 2021-06-16 Date of last...

The vulnerability of the Windows operating system’s kernel driver allows a hacker to gain increased privileges.

The vulnerability of the Windows operating system’s kernel driver mode is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...

The vulnerability of the Microsoft Enhanced Cryptographic Provider on Microsoft Windows operating systems allows attackers to enhance their privileges.

The vulnerability of Microsoft’s Enhanced Cryptographic Provider on Microsoft Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability can allow attackers to enhance their privileges...

Microsoft Windows Multiple Vulnerabilities (KB5003646)

This host is missing a critical security update according to Microsoft KB5003646 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Microsoft Windows Multiple Vulnerabilities (KB5003635)

This host is missing a critical security update according to Microsoft KB5003635 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES11 Security Update : java-1_7_1-ibm (SUSE-SU-2019:14160-1)

The remote SUSE Linux SLES11 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2019:14160-1 advisory. - AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

The vulnerability of the Trend Micro OfficeScan antivirus protection, related to privilege management errors, allows a perpetrator to elevate their privileges or cause service interruptions.

The vulnerability of the Trend Micro OfficeScan antivirus protection lies in privilege management errors. Exploiting this vulnerability allows a remote attacker to increase their privileges or cause service interruptions...

Adobe Connect Access Control Error Vulnerability

Adobe Connect is an online video conferencing software. A security vulnerability exists in Adobe Connect. An attacker could exploit the vulnerability to elevate privileges...

Microsoft Windows Multiple Vulnerabilities (KB5003667)

This host is missing a critical security update according to Microsoft KB5003667 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-31954 Windows Common Log File System Driver Elevation of Privilege Vulnerability

...

inappropriate x86 IOMMU timeout detection / handling

ISSUE DESCRIPTION IOMMUs process commands issued to them in parallel with the operation of the CPUs issuing such commands. In the current implementation in Xen, asynchronous notification of the completion of such commands is not used. Instead, the issuing CPU spin-waits for the completion of the...

Mendix SAML 数据伪造问题漏洞

The Mendix SAML Module allows authenticating users in cloud applications using SAML. The module can communicate with any identity provider that supports SAML 2.0 or Shibboleth. An elevation of privilege vulnerability exists in the Siemens Mendix SAML Module. An authenticated, remote attacker coul...

PT-2021-3270 · Microsoft · Enhanced Cryptographic Provider +1

Name of the Vulnerable Software and Affected Versions: Microsoft Enhanced Cryptographic Provider affected versions not specified Description: The issue is related to insecure privilege management in the Microsoft Enhanced Cryptographic Provider, which can be exploited to elevate privileges. This...

IBM Spectrum Scale Elevation of Privilege Vulnerability (CNVD-2021-38676)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

The vulnerability of the Exim message transfer agent, related to privilege management errors, allows a hacker to elevate their privileges within the system.

The vulnerability of the Exim message transfer agent is related to privilege management errors. Exploiting this vulnerability can allow an attacker to elevate privileges within the system by sending the file’s PID...

Huawei ESE620X vESS Buffer Overflow Vulnerability (CNVD-2021-100796)

Huawei ESE620X vESS is a virtual enterprise service controller that provides voice, video, trunk communications, and industry-related services.Huawei ESE620X vESS is vulnerable to a buffer overflow vulnerability that could be exploited by a local attacker to submit a special request that could...