Lucene search
+L

154 matches found

SUSE CVE
SUSE CVE
•added 2023/02/15 3:52 a.m.•7 views

SUSE CVE-2020-28014

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten...

6.1CVSS7.8AI score0.0094EPSS
SaveExploits1References6
Prion
Prion
•added 2023/01/03 9:15 p.m.•34 views

Out-of-bounds

In meta wifi, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07441652; Issue ID: ALPS07441652...

4CVSS6.7AI score0.00136EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/15 12:00 a.m.•21 views

PT-2022-27645 · Trend Micro · Trend Micro Apex One +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: A link following vulnerability in the Damage Cleanup Engine component could allow a local attacker to escalate...

7.8CVSS7.7AI score0.00303EPSS
SaveExploits0References7
Prion
Prion
•added 2022/12/05 3:15 p.m.•28 views

Memory corruption

In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363786; Issue ID: ALPS07363786...

4CVSS6.8AI score0.00137EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/12/05 12:00 a.m.•41 views

CVE-2022-32622

In gz, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation. Patch ID: ALPS07363786; Issue ID: ALPS07363786...

7AI score0.00137EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2022/11/21 12:00 a.m.•8 views

PT-2022-27277 · Trend Micro · Trend Micro Apex One +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: The issue is an Out-of-bounds read that could allow a local attacker to disclose sensitive information on...

5.5CVSS5.1AI score0.00704EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2022/10/10 9:15 p.m.•17 views

CVE-2022-41747

An improper certification validation vulnerability in Trend Micro Apex One agents could allow a local attacker to load a DLL file with system service privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in...

7.8CVSS6AI score0.00245EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/10/10 9:15 p.m.•14 views

CVE-2022-41745

An Out-of-Bounds access vulnerability in Trend Micro Apex One could allow a local attacker to create a specially crafted message to cause memory corruption on a certain service process which could lead to local privilege escalation on affected installations. Please note: an attacker must first...

7CVSS6AI score0.00694EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/09/28 9:15 p.m.•17 views

CVE-2022-40709

An Out-of-bounds read vulnerability in Trend Micro Deep Security 20 and Cloud One - Workload Security Agent for Windows could allow a local attacker to disclose sensitive information on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code o...

3.3CVSS5.8AI score0.00435EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2022/09/23 12:00 a.m.•22 views

PT-2022-25484 · Trend Micro · Trend Micro Deep Security +1

Name of the Vulnerable Software and Affected Versions: Trend Micro Deep Security versions 20 Trend Micro Cloud One - Workload Security Agent for Windows affected versions not specified Description: An Out-of-bounds read issue could allow a local attacker to disclose sensitive information on...

3.3CVSS3.5AI score0.00174EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2022/09/19 6:15 p.m.•15 views

CVE-2022-40142

A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service agents could allow a local attacker to create a writable folder in an arbitrary location and escalate privileges on affected installations. Please note: an attacker mus...

7.8CVSS6.1AI score0.00241EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/09/19 6:15 p.m.•11 views

CVE-2022-40142

A security link following local privilege escalation vulnerability in Trend Micro Apex One and Trend Micro Apex One as a Service agents could allow a local attacker to create a writable folder in an arbitrary location and escalate privileges on affected installations. Please note: an attacker mus...

7.8CVSS7.4AI score0.00241EPSS
SaveExploits0References3
CNNVD
CNNVD
•added 2022/07/18 12:00 a.m.•21 views

Parallels Access code-related vulnerabilities

Parallels Access is a parallel access application from Parallels USA. enabling the fastest, easiest, and most reliable remote access to your computer from anywhere. A code issue vulnerability exists in Parallels Access Agent version 6.5.4 39316 that stems from This vulnerability allows a local...

7.8CVSS7.9AI score0.00344EPSS
SaveExploits0References3
Prion
Prion
•added 2022/06/15 2:15 p.m.•27 views

Out-of-bounds

In getAppSize of InstalldNativeService.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-12LAndroid...

4.6CVSS6.5AI score0.00123EPSS
SaveExploits0References1Affected Software1
osv_cve
osv_cve
•added 2022/05/27 12:15 a.m.•14 views

CVE-2022-30700

An incorrect permission assignment vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to load a DLL with escalated privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target...

7.8CVSS6AI score0.00296EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2022/05/27 12:15 a.m.•17 views

CVE-2022-30701

An uncontrolled search path element vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to craft a special configuration file to load an untrusted library with escalated privileges on affected installations. Please note: an attacker must first obtain the...

7.8CVSS6AI score0.00387EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/16 3:15 p.m.•29 views

CVE-2021-39725

In gasketfreecoherentmemoryall of gasketpagetable.c, there is a possible memory corruption due to a double free. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroi...

6.7CVSS0.0011EPSS
SaveExploits0References1
Prion
Prion
•added 2022/03/16 3:15 p.m.•34 views

Out-of-bounds

In the TitanM chip, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID:...

4.6CVSS6.7AI score0.00113EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2022/03/03 7:11 p.m.•25 views

GHSA-V3WR-67PX-44XG Execution with Unnecessary Privileges in arc-electron

Impact When the end-user click on the response header that contains a link the target will be opened in ARC new window. This window will have the default preload script loaded which allows the scripts embedded in the link target to execute any logic that ARC has access to from the renderer proces...

7AI score
SaveExploits0References2
Cvelist
Cvelist
•added 2022/02/11 5:40 p.m.•41 views

CVE-2021-39674

In btmsecconnected and btmsecdisconnected of btmsec.cc file , there is a possible use after free. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12Andro...

7.9AI score0.00148EPSS
SaveExploits0References1
Rows per page
Query Builder