Lucene search
+L

6777 matches found

Talos
Talos
•added 2020/12/16 12:00 a.m.•86 views

NZXT CAM WinRing0x64 driver IRP 0x9c402084 information disclosure vulnerability

Summary An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this vulnerability. Tested...

6.5CVSS6.4AI score0.00515EPSS
SaveExploits1
Talos
Talos
•added 2020/12/16 12:00 a.m.•71 views

NZXT CAM WinRing0x64 driver privileged I/O read IRPs information disclosure vulnerability

Summary An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet IRP can cause the disclosure of sensitive information. An attacker can send a malicious IRP to trigger this...

6.5CVSS6.2AI score0.00515EPSS
SaveExploits3
RedHat Linux
RedHat Linux
•added 2020/12/15 5:24 p.m.•144 views

Important: Red Hat Security Advisory: net-snmp security and bug fix update

An update for net-snmp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

7.8CVSS7AI score0.00379EPSS
SaveExploits0References3
AlmaLinux
AlmaLinux
•added 2020/12/15 3:56 p.m.•46 views

Important: net-snmp security and bug fix update

The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an extensible agent, tools for requesting or setting information from SNMP agents, tools for generating and handling SNMP traps, a version of the netstat command...

7.2CVSS0.6AI score0.00379EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2020/12/15 2:10 p.m.•136 views

Important: Red Hat Security Advisory: net-snmp security and bug fix update

An update for net-snmp is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available fo...

7.8CVSS7AI score0.00379EPSS
SaveExploits0References2
RedHat Linux
RedHat Linux
•added 2020/12/15 2:10 p.m.•10 views

net-snmp: Improper Privilege Management in EXTEND MIB may lead to privileged commands execution

A flaw was found in Net-SNMP through version 5.73, where an Improper Privilege Management issue occurs due to SNMP WRITE access to the EXTEND MIB allows running arbitrary commands as root. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

7.8CVSS6.9AI score0.00379EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/15 12:00 a.m.•4 views

CVE-2020-29481: Improper Privilege Management

An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing granted access rights are not removed when a domain is being destroyed. This means that a new domain created with the same domid will inherit the access rights to Xenstore nodes...

8.8CVSS5.8AI score0.00351EPSS
SaveExploits0References2
NVD
NVD
•added 2020/12/14 8:15 p.m.•35 views

CVE-2020-8258

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files...

7.5CVSS7.6AI score0.0128EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2020/12/14 8:15 p.m.•7 views

CVE-2020-8257

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks...

9.8CVSS8.5AI score0.01654EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/14 8:15 p.m.•36 views

Input validation

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files...

5CVSS8AI score0.0128EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2020/12/14 8:15 p.m.•8 views

CVE-2020-8258

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files...

7.5CVSS7.5AI score0.0128EPSS
SaveExploits0References2
Prion
Prion
•added 2020/12/14 8:15 p.m.•23 views

Input validation

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks...

7.5CVSS9.6AI score0.01654EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2020/12/14 7:42 p.m.•39 views

CVE-2020-8258

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files...

8.1AI score0.0128EPSS
SaveExploits0References1
CVE
CVE
•added 2020/12/14 7:42 p.m.•73 views

CVE-2020-8258

The CVE-2020-8258 issue affects Citrix Gateway Plug-in for Windows, specifically versions 13.0 before 64.35 and 12.1 before 59.16 (including 13.0-61.48 and 12.1-58.15). It is caused by improper privilege management in services run by the plug-in, enabling an attacker to modify arbitrary files. Re...

7.5CVSS8AI score0.0128EPSS
SaveExploits0References1Affected Software1
CVE
CVE
•added 2020/12/14 7:42 p.m.•80 views

CVE-2020-8257

CVE-2020-8257 relates to Citrix Gateway Plug-in for Windows. Affected versions before 13.0-64.35 and 12.1-59.16 (including 12.1-FIPS 55.190) have improper privilege management enabling local privilege escalation to SYSTEM. Citrix CTX282684 fixes: upgrade to Citrix Gateway Plug-in 13.0-64.35+, 12....

9.8CVSS9.6AI score0.01654EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•4 views

CVE-2020-8258: Improper Privilege Management

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacker to modify arbitrary files...

7.5CVSS5.9AI score0.0128EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•3 views

CVE-2020-8257: Improper Privilege Management

Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege escalation attacks...

9.8CVSS5.7AI score0.01654EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/12/14 12:00 a.m.•3 views

CVE-2020-8283: Improper Privilege Management

An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CTX286120, 7.15 LTSR CU6 hotfix CTX285344 and 7.6 LTSR CU9...

9CVSS5.9AI score0.02682EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2020/12/11 12:00 a.m.•16 views

The vulnerability of Google Chrome web browser tools allows attackers to gain unauthorized access to protected information.

The vulnerability of Google Chrome web browser tools is related to privilege management errors. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

6.4CVSS7.1AI score0.00942EPSS
SaveExploits0References10Affected Software6
BDU FSTEC
BDU FSTEC
•added 2020/12/11 12:00 a.m.•13 views

The vulnerability of the Networking component in the Google Chrome web browser, which allows a hacker to increase their privileges

The vulnerability of the Networking component in the Google Chrome web browser is related to privilege management errors. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

7.3CVSS7.7AI score0.00842EPSS
SaveExploits1References13Affected Software6
Rows per page
Query Builder