5243 matches found
CVE-2021-30724
This issue was addressed with improved checks. This issue is fixed in tvOS 14.6, Security Update 2021-004 Mojave, iOS 14.6 and iPadOS 14.6, Security Update 2021-003 Catalina, macOS Big Sur 11.4, watchOS 7.5. A local attacker may be able to elevate their privileges...
Tuxera NTFS-3G Buffer Overflow Vulnerability (CNVD-2021-72266)
Tuxera NTFS-3G is Finland's Tuxera company's set of open source , cross-platform for supporting NTFS partition read and write drivers . A security vulnerability exists in NTFS-3G that originates from an application's improper validation of certain NTFS metadata, which can be exploited by an...
Cisco Application Policy Infrastructure Controller Elevation of Privilege Vulnerability (CNVD-2021-68725)
Cisco Application Policy Infrastructure Controller APIC is an automated infrastructure deployment and governance solution from Cisco. The API endpoint of the Controller contains an elevation of privilege vulnerability that can be exploited by an attacker with administrator read-only credentials t...
CVE-2021-1579
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller APIC and Cisco Cloud Application Policy Infrastructure Controller Cloud APIC could allow an authenticated, remote attacker with Administrator read-only credentials to elevate privileges on an affected system...
CVE-2021-1579
A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller APIC and Cisco Cloud Application Policy Infrastructure Controller Cloud APIC could allow an authenticated, remote attacker with Administrator read-only credentials to elevate privileges on an affected system...
grant table v2 status pages may remain accessible after de-allocation
ISSUE DESCRIPTION Guest get permitted access to certain Xen-owned pages of memory. The majority of such pages remain allocated / associated with a guest for its entire lifetime. Grant table v2 status pages, however, get de-allocated when a guest switched back from v2 to v1. The freeing of such...
CVE-2021-30906
This issue was addressed with improved checks. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. A local attacker may be able to elevate their privileges...
CVE-2021-30873
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to elevate privileges...
Code injection
A logic issue was addressed with improved state management. This issue is fixed in macOS Monterey 12.0.1. A malicious application may be able to elevate privileges...
Design/Logic Flaw
This issue was addressed with improved checks. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, tvOS 15.1, watchOS 8.1, macOS Big Sur 11.6.1. A local attacker may be able to elevate their privileges...
CVE-2021-30995
A race condition was addressed with improved state handling. This issue is fixed in macOS Big Sur 11.6.2, tvOS 15.2, macOS Monterey 12.1, Security Update 2021-008 Catalina, iOS 15.2 and iPadOS 15.2, watchOS 8.3. A malicious application may be able to elevate privileges...
CVE-2021-30907
An integer overflow was addressed through improved input validation. This issue is fixed in iOS 15.1 and iPadOS 15.1, macOS Monterey 12.0.1, iOS 14.8.1 and iPadOS 14.8.1, tvOS 15.1, watchOS 8.1, Security Update 2021-007 Catalina, macOS Big Sur 11.6.1. A malicious application may be able to elevat...
CVE-2021-30906
CVE-2021-30906 is a local elevation-of-privileges flaw reported in the Apple watchOS/iCloud stack. The vulnerability can be exploited by a local attacker with a simple authentication, leading to higher privileges. The issue is addressed by Apple in their updates for iOS 15.1/iPadOS 15.1 and relat...
CVE-2021-30873
CVE-2021-30873 affects macOS Monterey 12.0.1 (AppKit section). The issue is described as a logic issue addressed with improved state management that may allow a malicious application to elevate privileges. The fix is in macOS Monterey 12.0.1. Other documents corroborate the vulnerability’s associ...
PT-2021-7281 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.0.1 Description: A logic issue was addressed with improved state management, which could allow a malicious application to elevate privileges. The issue is related to insecure privilege management, potentially enabli...
Dell EMC PowerScale OneFS OS Command Injection Vulnerability
Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2.1. of Dell EMC PowerScale OneFS is vulnerable to OS command injection. An attacker with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges can exploit this vulnerability to elevate privileges and evade compliance assurance...
CVE-2021-21595
Dell EMC PowerScale OneFS versions 8.2.x - 9.1.1.x contain an improper neutralization of special elements used in an OS command. This vulnerability could allow the compadmin user to elevate privileges. This only impacts Smartlock WORM compliance mode clusters as a critical vulnerability and Dell...
EMC PowerScale操作系统命令注入漏洞
Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2.1. of Dell EMC PowerScale OneFS is vulnerable to OS command injection. An attacker with ISIPRIVLOGINSSH or ISIPRIVLOGINCONSOLE privileges can exploit this vulnerability to elevate privileges and evade compliance assurance...
Microsoft’s PrintNightmare continues, shrugs off Patch Tuesday fixes
I doubt if there has ever been a more appropriate nickname for a vulnerable service than PrintNightmare. There must be a whole host of people in Redmond having nightmares about the Windows Print Spooler service by now. PrintNightmare is the name of a set of vulnerabilities that allow a standard...