IBM i Security Vulnerabilities

IBM i is a suite of operating systems from International Business Machines IBM that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i that stems from a local elevation of privilege vulnerability in Management Central. An attacker could exploit the vulnerabilit...

IBM i Security Vulnerabilities

IBM i is a suite of operating systems from International Business Machines IBM that run on IBM Power Systems and IBM PureSystems. A security vulnerability exists in IBM i that stems from a local elevation of privilege vulnerability in Management Central. An attacker could exploit the vulnerabilit...

AZL-31733 CVE-2023-34059 affecting package open-vm-tools for versions less than 11.3.0-3

open-vm-tools contains a file descriptor hijack vulnerability in the vmware-user-suid-wrapper. A malicious actor with non-root privileges may be able to hijack the /dev/uinput file descriptor allowing them to simulate user inputs...

ABUS TVIP Security Vulnerability

ABUS TVIP is a series of video surveillance cameras from the German company ABUS. ABUS TVIP suffers from a security vulnerability that stems from a CGI script that allows a remote attacker to execute code as root...

ABUS TVIP Security Vulnerability

ABUS TVIP is a series of video surveillance cameras from the German company ABUS. A security vulnerability exists in ABUS TVIP that stems from the presence of hard-coded credentials and operating system command injection vulnerabilities that allow remote attackers to execute code as root...

CVE-2023-41989

The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen...

Design/Logic Flaw

The issue was addressed by restricting options offered on a locked device. This issue is fixed in macOS Sonoma 14.1. An attacker may be able to execute arbitrary code as root from the Lock Screen...

CVE-2023-43506

A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher role. A successful exploit allows malicious users to execute arbitrary code with root level privileges on the Linux instance...

CVE-2023-26578

Arbitrary file upload to web root in the IDAttend’s IDWeb application 3.1.013 allows authenticated attackers to upload dangerous files to web root such as ASP or ASPX, gaining command execution on the affected server...

PT-2023-8356 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.1 Description: The issue is related to errors in security settings of the Emoji component in the macOS operating system. An attacker may be able to execute arbitrary code as root from the Lock Screen. This is achiev...

Bosch ctrlX HMI Web Panel WR21 Security Vulnerability

Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. A security vulnerability exists in Bosch ctrlX HMI Web Panel WR21, which originated from a vulnerability that allows a low-privileged attacker to gain root privileges by modifying critical system properties and exposing the ADB...

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14.1, which originates from the fact that an attacker may be able to execute arbitrary code from the lock screen as root...

Bosch ctrlX HMI Web Panel WR21 Access Control Error Vulnerability

Bosch ctrlX HMI Web Panel WR21 is an HMI panel from Bosch Germany. A security vulnerability exists in the Bosch ctrlX HMI Web Panel WR21 version that originates from a vulnerability that allows an unprivileged attacker with privileged access to the TPC-110W device subnet to gain root privileges a...

PT-2023-28849 · Aruba Networks · Clearpass Onguard +1

Name of the Vulnerable Software and Affected Versions: Aruba Networks ClearPass Policy Manager affected versions not specified Description: A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges to those of a higher...

Zscaler Client Connector Code Issue Vulnerability

Zscaler Client Connector is an application from zscaler. An application that is installed on a device to ensure that Internet traffic and access to an organization's internal applications are secure and in compliance with the organization's policies, even when not on the corporate network. A...

The vulnerability in the web interface of the Cisco IOS XE operating system allows a perpetrator to execute arbitrary commands on a device with root privileges.

The vulnerability of the Cisco IOS XE operating system’s web interface is related to errors in privilege management. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands on a device with root privileges remotely...

OESA-2023-1756 samba security update

Samba is a suite of programs for Linux and Unix to interoperate with Windows. Security Fixes: A path traversal vulnerability was identified in Samba when processing client pipe names connecting to Unix domain sockets within a private directory. Samba typically uses this mechanism to connect SMB...

CVE-2023-34045

VMware Fusion13.x prior to 13.5 contains a local privilege escalation vulnerability that occurs during installation for the first time the user needs to drag or copy the application to a folder from the '.dmg' volume or when installing an upgrade. A malicious actor with local non-administrative...

CVE-2023-34046

VMware Fusion13.x prior to 13.5 contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during installation for the first time the user needs to drag or copy the application to a folder from the '.dmg' volume or when installing an upgrade. A malicious actor with local...

CVE-2023-34046 VMware Fusion TOCTOU local privilege escalation vulnerability

VMware Fusion13.x prior to 13.5 contains a TOCTOU Time-of-check Time-of-use vulnerability that occurs during installation for the first time the user needs to drag or copy the application to a folder from the '.dmg' volume or when installing an upgrade. A malicious actor with local...