Lucene search
+L

3392 matches found

Microsoft CVE
Microsoft CVE
added 2021/12/16 8:00 a.m.7 views

NTFS-3G versions < 2021.8.22 a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root.

...

7.8CVSS8.5AI score0.00488EPSS
SaveExploits0
OSV
OSV
added 2021/11/07 6:15 p.m.8 views

CVE-2021-43411

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the new privileges, but still refers to the old task and is accessible through the old process port. This can be exploited to get full root...

7.5CVSS7.1AI score0.01226EPSS
SaveExploits1References3
ATTACKERKB
ATTACKERKB
added 2021/11/07 6:15 p.m.8 views

CVE-2021-43411

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the new privileges, but still refers to the old task and is accessible through the old process port. This can be exploited to get full root...

8.5CVSS7.1AI score0.01226EPSS
SaveExploits1References5
Prion
Prion
added 2021/11/07 6:15 p.m.27 views

Design/Logic Flaw

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the new privileges, but still refers to the old task and is accessible through the old process port. This can be exploited to get full root...

8.5CVSS7.4AI score0.01226EPSS
SaveExploits1References3Affected Software1
Debian CVE
Debian CVE
added 2021/11/07 5:06 p.m.61 views

CVE-2021-43411

An issue was discovered in GNU Hurd before 0.9 20210404-9. When trying to exec a setuid executable, there's a window of time when the process already has the new privileges, but still refers to the old task and is accessible through the old process port. This can be exploited to get full root...

8.5CVSS7.4AI score0.01226EPSS
SaveExploits1
CVE
CVE
added 2021/11/07 5:06 p.m.75 views

CVE-2021-43411

CVE-2021-43411 affects GNU Hurd up to version 0.9 20210404-9. When attempting to exec a setuid executable, a window exists where the process has new privileges but still references the old task and is reachable via the old process port, enabling full root access according to the vulnerability des...

8.5CVSS7.4AI score0.01226EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
added 2021/11/07 12:00 a.m.11 views

GNU Hurd 竞争条件问题漏洞

Gnu Hurd is a Gnu project replacement for the Unix kernel. It is used to implement file systems, network protocols, file access control, and other features implemented by the Unix kernel or similar kernels such as Linux. A security vulnerability exists in GNU Hurd, which originated in GNU Hurd...

8.5CVSS5.8AI score0.01226EPSS
SaveExploits1References4
VulnCheck KEV
VulnCheck KEV
added 2021/11/03 12:00 a.m.10 views

VulnCheck KEV: CVE-2020-3950

VMware Fusion, Remote Console VMRC for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root...

7.8CVSS7.1AI score0.07254EPSS
SaveExploits10References1
CISA KEV Catalog
CISA KEV Catalog
added 2021/11/03 12:00 a.m.57 views

VMware Multiple Products Privilege Escalation Vulnerability

VMware Fusion, Remote Console VMRC for Mac, and Horizon Client for Mac contain a privilege escalation vulnerability due to improper use of setuid binaries that allows attackers to escalate privileges to root...

7.8CVSS7.7AI score0.07254EPSS
SaveIn wildExploits10
UbuntuCve
UbuntuCve
added 2021/10/27 1:15 a.m.49 views

CVE-2011-4125

A untrusted search path issue was found in Calibre at devices/linuxmounthelper.c leading to the ability of unprivileged users to execute any program as root...

10CVSS7.2AI score0.02308EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2021/10/27 1:15 a.m.54 views

CVE-2011-4124

Input validation issues were found in Calibre at devices/linuxmounthelper.c which can lead to argument injection and elevation of privileges...

10CVSS7.2AI score0.02308EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2021/10/14 8:05 p.m.68 views

CVE-2021-3847

An unauthorized access to the execution of the setuid file with capabilities flaw in the Linux kernel OverlayFS subsystem was found in the way user copying a file with capabilities from a nosuid mount into another mount. A local user could use this flaw to escalate their privileges on the system...

7.8CVSS7.1AI score0.0788EPSS
SaveExploits14References4
OSV
OSV
added 2021/10/04 9:15 p.m.50 views

CVE-2021-41091

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where the data directory typically /var/lib/docker contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traver...

6.3CVSS6.6AI score
SaveExploits0References5
Debian CVE
Debian CVE
added 2021/10/04 8:20 p.m.97 views

CVE-2021-41091

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where the data directory typically /var/lib/docker contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traver...

6.3CVSS5.9AI score0.02848EPSS
SaveExploits3
Cvelist
Cvelist
added 2021/10/04 8:20 p.m.40 views

CVE-2021-41091 Insufficiently restricted permissions on data directory in Docker Engine

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where the data directory typically /var/lib/docker contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traver...

6.3CVSS7.1AI score0.02848EPSS
SaveExploits3References5
OSV
OSV
added 2021/10/04 5:15 p.m.57 views

CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

7.8CVSS7.6AI score
SaveExploits0References7
OSV
OSV
added 2021/10/04 5:15 p.m.6 views

DEBIAN-CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

7.8CVSS6.3AI score0.00518EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/10/04 5:15 p.m.8 views

CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

7.8CVSS6.5AI score0.00518EPSS
SaveExploits0References10Affected Software1
CNNVD
CNNVD
added 2021/10/04 12:00 a.m.9 views

Moby 安全漏洞

Moby is an open source project that aims to drive containerization of software and help the ecosystem make container technology mainstream. Moby suffers from a security vulnerability that stems from a bug found in Moby Docker Engine where the data directory typically var lib Docker contains...

6.3CVSS7.4AI score0.02848EPSS
SaveExploits3References14
Veracode
Veracode
added 2021/09/19 5:45 a.m.16 views

Privilege Escalation

seatd is vulnerable to privilege escalation. The vulnerability exists due to the system using execlp whichallows setuid root to be installed...

8.8CVSS3.8AI score0.01063EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder