14254 matches found
CVE-2024-37133
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to unauthorized gain of root-level access...
CVE-2024-37134
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability to gain root-level access...
CVE-2024-37126
Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 contain an improper privilege management vulnerability. A local high privileged attacker could potentially exploit this vulnerability, leading to unauthorized gain of root-level access...
The vulnerability of the createinstallmedia component in the Parallels Desktop hypervisor allows a malicious user to elevate their privileges to the root level.
The vulnerability of the createinstallmedia component in Parallels Desktop Hypervisor Edition is related to the lack of signature verification. Exploiting this vulnerability can allow an attacker to elevate their privileges to root level using the repackosxinstallapp.sh script...
Dell PowerScale OneFS 安全漏洞
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by a local, highly-privileged attacker to gain root-level access...
Dell PowerScale OneFS 安全漏洞
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by a local, high-privilege attacker to cause unauthorized root-level access to...
Dell PowerScale OneFS 安全漏洞
Dell PowerScale OneFS is an operating system from Dell USA. PowerScale OneFS operating system that provides horizontal scaling of NAS. A security vulnerability exists in Dell PowerScale OneFS, which can be exploited by a local, high-privilege attacker to cause unauthorized root-level access to...
CVE-2024-20399
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...
Exploit for Race Condition in Openbsd Openssh
cve-2024-6387-poc a signal handler race condition in OpenSSH...
VulnCheck KEV: CVE-2024-20399
Cisco NX-OS contains a command injection vulnerability in the command line interface CLI that could allow an authenticated, local attacker to execute commands as root on the underlying operating system of an affected device...
SSSD: Command Injection
Background SSSD provides a set of daemons to manage access to remote directories and authentication mechanisms such as LDAP, Kerberos or FreeIPA. It provides an NSS and PAM interface toward the system and a pluggable backend system to connect to multiple different account sources. Description A...
PT-2024-5002 · Dell · Dell Powerscale Onefs
Name of the Vulnerable Software and Affected Versions: Dell PowerScale OneFS versions 8.2.2.x through 9.8.0.0 Description: The issue is related to improper privilege management, which could be exploited by a local high-privileged attacker to gain root-level access. This vulnerability is associate...
PT-2024-5205 · Cocoapods · Cocoapods
Name of the Vulnerable Software and Affected Versions: CocoaPods affected versions not specified Description: The issue concerns the CocoaPods dependency manager, specifically the authentication server trunk.cocoapods.org. A problem was found in the part of the trunk that verifies whether a user...
Cisco NX-OS Software 操作系统命令注入漏洞
Cisco NX-OS Software is a set of data center-grade operating system software for switches from the U.S. company Cisco Cisco. A command injection vulnerability exists in Cisco NX-OS Software, which arises from insufficient validation of parameters passed to specific configuration CLI commands, and...
CocoaPods Security Vulnerability
CocoaPods is a Cocoa dependency manager open-sourced by CocoaPods. A security vulnerability exists in CocoaPods, which stems from the presence of a remote code execution vulnerability that can be exploited by an attacker to gain root access...
CVE-2024-20399
A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated user in possession of Administrator credentials to execute arbitrary commands as root on the underlying operating system of an affected device. This vulnerability is due to insufficient validation of arguments that ar...
The vulnerability of the server in the OpenSSH encryption tool allows a hacker to execute arbitrary code.
The vulnerability of the OpenSSH server security tool is related to the reutilization of previously freed memory due to competitive access to resources. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...
OpenSSH -- Race condition resulting in potential remote code execution
The OpenSSH project reports: A race condition in sshd8 could allow remote code execution as root on non-OpenBSD systems...