14940 matches found
Privilege escalation
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation...
CVE-2021-3626 Windows version of Multipass unauthenticated localhost tcp control socket can perform mounts
The Windows version of Multipass before 1.7.0 allowed any local process to connect to the localhost TCP control socket to perform mounts from the operating system to a guest, allowing for privilege escalation...
PT-2021-21192 · Canonical · Multipass
Name of the Vulnerable Software and Affected Versions: Multipass versions prior to 1.7.0 Description: The issue allows any local process to connect to the localhost TCP control socket, enabling mounts from the operating system to a guest. This can lead to privilege escalation. Recommendations: Fo...
The vulnerabilities of SIPROTEC relay protection devices allow a intruder to execute arbitrary code.
The vulnerability of SIPROTEC relay protection devices arises from an overflow in the buffer on the socket layer. Exploiting this vulnerability allows a remote attacker to execute arbitrary code using specially crafted packets sent to port 4443/tcp...
aurelia-sails-socket-client (0.10.0) potentially affected by CVE-2021-41097 via aurelia-path (1.0.0-beta.1)
aurelia-path NPM version 1.0.0-beta.1 is affected by a known vulnerability. The following packages have a transitive dependency on aurelia-path and may be impacted: - aurelia-sails-socket-client 0.10.0 Source cves: CVE-2021-41097 Source advisory: OSV:GHSA-3C9C-2P65-QVWV...
CVE-2021-31605
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...
Command injection
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...
PYSEC-2021-353
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal%20SIGTERM...
EulerOS 2.0 SP5 : avahi (EulerOS-SA-2021-2492)
According to the versions of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket i...
PT-2021-7117 · Linux +8 · Linux Kernel +8
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A use-after-free read flaw was found in the sock getsockopt function in net/core/sock.c due to a race condition with listen and connect when using SO PEERCRED and SO PEERGROUPS. This...
OpenVPN Monitor 1.1.3 Command Injection Vulnerability
OpenVPN Monitor versions 1.1.3 and below suffer from an injection vulnerability that allows an attacker to inject arbitrary commands into the OpenVPN server management interface socket. Product: openvpn-monitor Vendor: https://github.com/furlongm/openvpn-monitor CSNC ID: CSNC-2021-010 CVE ID:...
Openvpn OpenVPN 命令注入漏洞
Openvpn OpenVPN is a software package from the US-based OpenVPN Openvpn for creating virtual private network VPN encrypted tunnels that use the OpenSSL library to encrypt data and control information, and allow created VPNs to be authenticated using a public key, an e-certificate, or a...
EulerOS 2.0 SP8 : avahi (EulerOS-SA-2021-2454)
According to the versions of the avahi packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A flaw was found in avahi in versions 0.6 up to 0.8. The event used to signal the termination of the client connection on the avahi Unix socket i...
SUSE SLES12: cluster-md-kmp-rt / dlm-kmp-rt / gfs2-kmp-rt / kernel-devel-rt / etc (SUSE-SU-2021:3217-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3217-1 advisory. The SUSE Linux Enterprise 12 SP5 Realtime kernel was updated to receive various security and bugfixes. The following security bugs were fixed: ...
Security Bulletin: Vulnerability in systemd affects Power Hardware Management Console (CVE-2019-6454)
Summary The systemd is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE Vulnerability Details CVEID: CVE-2019-6454 DESCRIPTION: The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provid...
CVE-2021-38628
Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability...
CVE-2021-38648
Open Management Infrastructure Elevation of Privilege Vulnerability Recent assessments: zeroSteiner at October 27, 2021 5:59pm UTC reported: A locally exploitable vulnerability exists within Microsoft’s OMI management server in versions prior to 1.6.8-1 that can allow a local attacker to execute...
Microsoft Windows Ancillary Function Driver for WinSock 权限许可和访问控制问题漏洞
Microsoft Windows Ancillary Function Driver for WinSock is a helper function driver for Winsock from Microsoft Corporation USA. A vulnerability exists in Microsoft Windows Ancillary Function Driver for WinSock due to permission and access control issues. The following products and editions are...
PT-2021-6384 · Microsoft · Windows Ancillary Function Driver For Winsock +1
Name of the Vulnerable Software and Affected Versions: Windows Ancillary Function Driver for WinSock affected versions not specified Description: The issue is related to insufficient access restrictions in the Windows Ancillary Function Driver for WinSock, which can be exploited to elevate...