The vulnerability in the web interface for managing microprogrammed software routers of Cisco Small Business RV110W, RV130, RV130W, and RV215W allows a perpetrator to execute arbitrary commands or cause service failures.

The vulnerability of the web-based management interfaces for Cisco Small Business RV110W, RV130, RV130W, and RV215W stems from the copying of buffers without checking the size of the input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the vulnerable devic...

PT-2022-23463 · Hytec Inter · Hytec Inter Hwl-2511-Ss

Name of the Vulnerable Software and Affected Versions: Hytec Inter HWL-2511-SS versions 1.05 and below Description: A command injection vulnerability in the CLI implementation allows attackers to execute arbitrary commands with root privileges. Recommendations: For Hytec Inter HWL-2511-SS version...

CVE-2022-36611

TOTOLINK A800R V4.1.2cu.5137_B20200730 is affected by a hardcoded root password in /etc/shadow.sample. CVE-2022-36611 has a CVSS v3.1 base score of 7.8 (LOCAL, HIGH impact) with local access required and simultaneous high confidentiality, integrity, and availability impacts. The issue is document...

CVE-2022-36610

CVE-2022-36610 affects TOTOLINK A720R, specifically version 4.1.5cu.532_B20210610, which reportedly contains a hardcoded root password in /etc/shadow.sample. The root cause is a hardcoded credential embedded in the device image, enabling local unauthorized access if exploited. Impact is described...

TOTOLINK A3000RU 信任管理问题漏洞

The TOTOLINK A3000Ru is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A3000RU version V4.1.2cu.5185B20201128, which originates from the inclusion of a hardcoded root password in /etc/shadow.sample...

TOTOLINK A810R 信任管理问题漏洞

The TOTOLINK A810R is a wireless dual-band router from China's Gion Electronics TOTOLINK. A security vulnerability exists in TOTOLINK A810R versions V4.1.2cu.5182B20201026 and V5.9c.4050B20190424, which originates from the inclusion of a hardcoded root password in /etc/shadow.sample...

TOTOLINK A800R 信任管理问题漏洞

The TOTOLINK A800R is a wireless router from China's Gion Electronics TOTOLINK. A security vulnerability exists in the TOTOLINK A800R version V4.1.2cu.5137B20200730, which originates from the inclusion of a hardcoded password for root in /etc/shadow.sample...

DEBIAN-CVE-2021-35939

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threa...

AZL-10769 CVE-2021-35939 affecting package rpm for versions less than 4.18.0-1

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threa...

UBUNTU-CVE-2021-35939

It was found that the fix for CVE-2017-7500 and CVE-2017-7501 was incomplete: the check was only implemented for the parent directory of the file to be created. A local unprivileged user who owns another ancestor directory could potentially use this flaw to gain root privileges. The highest threa...

CVE-2022-30984

A buffer overflow vulnerability in the Rubrik Backup Service RBS Agent for Linux or Unix-based systems in Rubrik CDM 7.0.1, 7.0.1-p1, 7.0.1-p2 or 7.0.1-p3 before CDM 7.0.2-p2 could allow a local attacker to obtain root privileges by sending a crafted message to the RBS agent...

Design/Logic Flaw

An issue was discovered in ClusterLabs Hawk aka HA Web Konsole through 2.3.0-15. It ships the binary hawkinvoke built from tools/hawkinvoke.c, intended to be used as a setuid program. This allows the hacluster user to invoke certain commands as root with an attempt to limit this to safe...

AZL-10766 CVE-2021-35937 affecting package rpm for versions less than 4.18.0-1

A race condition vulnerability was found in rpm. A local unprivileged user could use this flaw to bypass the checks that were introduced in response to CVE-2017-7500 and CVE-2017-7501, potentially gaining root privileges. The highest threat from this vulnerability is to data confidentiality and...

Rubrik 安全漏洞

Rubrik is a suite of cloud data management platforms from US-based Rubrik. The platform is capable of providing data backup, data protection, data analytics, data compliance and data recovery. A security vulnerability exists in Rubrik Backup Service RBS on Rubrik CDM versions 7.0.1, 7.0.1-p1,...

VulnCheck KEV: CVE-2019-5736

runc through 1.0-rc6, as used in Docker before 18.09.2 and other products, allows attackers to overwrite the host runc binary and consequently obtain host root access by leveraging the ability to execute a command as root within one of these types of containers: 1 a new container with an...

PT-2022-20437 · Rubrik · Rubrik Cdm

Name of the Vulnerable Software and Affected Versions: Rubrik CDM versions 7.0.1 through 7.0.1-p3 Description: A buffer overflow vulnerability in the Rubrik Backup Service RBS Agent for Linux or Unix-based systems could allow a local attacker to obtain root privileges by sending a crafted message...

CVE-2022-20824

A vulnerability in the Cisco Discovery Protocol feature of Cisco FXOS Software and Cisco NX-OS Software could allow an unauthenticated, adjacent attacker to execute arbitrary code with root privileges or cause a denial of service DoS condition on an affected device. This vulnerability is due to...

PT-2022-4439 · Cisco · Cisco Fxos

Name of the Vulnerable Software and Affected Versions: Cisco FXOS Software affected versions not specified Description: A vulnerability in the CLI of Cisco FXOS Software could allow an authenticated, local attacker to inject arbitrary commands that are executed with root privileges. The attacker...

DEBIAN-CVE-2022-31676

VMware Tools 12.0.0, 11.x.y and 10.x.y contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine...

CVE-2022-31676

VMware Tools 12.0.0, 11.x.y and 10.x.y contains a local privilege escalation vulnerability. A malicious actor with local non-administrative access to the Guest OS can escalate privileges as a root user in the virtual machine...