CVE-2022-25294: Undefined Security Weakness

Proofpoint Insider Threat Management Agent for Windows relies on an inherently dangerous function that could enable an unprivileged local Windows user to run arbitrary code with SYSTEM privileges. All versions prior to 7.12.1 are affected. Agents for MacOS and Linux and Cloud are unaffected...

Google Android 缓冲区错误漏洞

A buffer overflow vulnerability exists in Google Android, a Linux-based open source operating system from Google, Inc. The vulnerability originates in TuningProviderBase::GetTuningTreeSet in tuningproviderbase.cc, and may result in out-of-bounds reads due to a lack of boundary checking. An attack...

PT-2022-2715

Name of the Vulnerable Software and Affected Versions Proofpoint Insider Threat Management Agent for Windows versions prior to 7.12.1 Description The issue is related to the use of a potentially dangerous function in the Proofpoint Insider Threat Management Agent for Windows, which could allow an...

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to incorrect default access rights settings, allowing a perpetrator to execute arbitrary codes.

The vulnerability of the server application for managing food manufacturing enterprises AK-EM 800 is related to incorrect default access rights settings. Exploiting this vulnerability could allow an attacker to execute arbitrary code with privileges of SYSTEM...

CVE-2022-22943

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

CVE-2022-22943

VMware Tools for Windows 11.x.y and 10.x.y prior to 12.0.0 contains an uncontrolled search path vulnerability. A malicious actor with local administrative privileges in the Windows guest OS, where VMware Tools is installed, may be able to execute code with system privileges in the Windows guest O...

CVE-2021-45819

Wordline HIDCCEMonitorSVC before v5.2.4.3 contains an unquoted service path which allows attackers to escalate privileges to the system level...

Microsoft Windows Privilege Escalation Vulnerability

smss.exe debugging subsystem in Microsoft Windows does not properly authenticate programs that connect to other programs, which allows local users to gain administrator or SYSTEM privileges...

PT-2022-2232 · Vmware +1 · Vmware Tools +1

Name of the Vulnerable Software and Affected Versions: VMware Tools for Windows versions 10.x.y through 11.x.y prior to 12.0.0 Description: The issue is related to an uncontrolled search path vulnerability in VMware Tools for Windows. A malicious actor with local administrative privileges in the...

VMware Tools for Windows 代码问题漏洞

Vmware VMware Tools for Windows is a set of Windows-based enhancement tools for VMWare virtual machines from Vmware, a VMware driver for enhancing virtual graphics and hard drive performance and synchronizing virtual machine and host clocks. for Windows is vulnerable to a code issue that could be...

The vulnerability of Mozilla VPN’s network software lies in the ability to load the OpenSSL configuration file from an unprotected directory, allowing an attacker to execute arbitrary code with SYSTEM privileges.

The vulnerability of Mozilla VPN’s network software relates to the possibility of loading the OpenSSL configuration file from an unprotected directory. Exploiting this vulnerability could allow a hacker to execute arbitrary code with SYSTEM privileges...

Mozilla VPN 代码问题漏洞

Mozilla VPN is an open source virtual private network web browser extension, desktop application and mobile application from the US-based Mozilla Foundation. Mozilla VPN suffers from a code issue vulnerability that stems from the fact that Mozilla VPN can load OpenSSL configuration files from...

CVE-2020-10640

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service...

Remote code execution

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service...

CVE-2020-10640 ICSA-20-140-02 Emerson OpenEnterprise

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service...

CVE-2020-10640: Missing Authentication for Critical Function

Emerson OpenEnterprise versions through 3.3.4 may allow an attacker to run an arbitrary commands with system privileges or perform remote code execution via a specific communication service...

PT-2022-1721 · Mozilla · Vpn

Name of the Vulnerable Software and Affected Versions: Mozilla VPN versions prior to 2.7.1 Description: The issue is related to Mozilla VPN's ability to load an OpenSSL configuration file from an unsecured directory. This could allow a user or attacker with limited privileges to launch arbitrary...

CVE-2021-26726

A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021...

CVE-2021-26726

A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021...

Remote code execution

A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021...