6668 matches found
Improper access control
Improper access control vulnerability in masvc.exe in McAfee Agent MA prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility...
CVE-2020-7253
The CVE-2020-7253 issue affects McAfee Agent (MA) client components, specifically masvc.exe, prior to version 5.6.4. The root cause is improper access control that allows local users with administrator privileges to disable self-protection via a McAfee-supplied command-line utility. Impact descri...
CVE-2019-5159
An exploitable improper input validation vulnerability exists in the firmware update functionality of WAGO e!COCKPIT automation software v1.6.0.7. A specially crafted firmware update file can allow an attacker to write arbitrary files to arbitrary locations on WAGO controllers as a part of...
CVE-2020-7253
Improper access control vulnerability in masvc.exe in McAfee Agent MA prior to 5.6.4 allows local users with administrator privileges to disable self-protection via a McAfee supplied command-line utility...
CVE-2020-10188
utility.c in telnetd in netkit telnet through 0.17 allows remote attackers to execute arbitrary code via short writes or urgent data, because of a buffer overflow involving the netclear and nextitem functions...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
Authorization Bypass
smallrye-config is vulnerable to authorization bypass. The vulnerability exists as it improperly restricts the access to utility methods wrapping doPrivileged calls...
CVE-2019-18238
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account...
CVE-2019-18238: Cleartext Storage of Sensitive Information
In Moxa ioLogik 2500 series firmware, Version 3.0 or lower, and IOxpress configuration utility, Version 2.3.0 or lower, sensitive information is stored in configuration files without encryption, which may allow an attacker to access an administrative account...
HPSBHF03656 rev. 4 - Intel® Chipset Device Software INF Utility Security Update
Potential Security Impact Denial of Service. Source: HP, HP Product Security Response Team PSRT Reported by: Intel® VULNERABILITY SUMMARY HP has been notified of a potential security vulnerability in Intel® Chipset Device Software INF Utility that may allow denial of service via local access. Int...
CVE-2020-5324: Uncontrolled Search Path Element
Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged...
PT-2020-18401
Name of the Vulnerable Software and Affected Versions Dell Client Consumer and Commercial Platforms affected versions not specified Description The issue allows a locally authenticated low-privileged malicious user to exploit the Dell Firmware Update Utility by tricking an administrator into...
Oracle Linux 7 : sudo (ELSA-2020-0540)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-0540 advisory. - fixed CVE-2019-18634 Resolves: rhbz1798094 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
CentOS 7 : sudo (RHSA-2020:0540)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:0540 advisory. - In Sudo before 1.8.26, if pwfeedback is enabled in /etc/sudoers, users can trigger a stack-based buffer overflow in the privileged sudo process. pwfeedback is...
RHEL 7 : curl (RHSA-2020:0544)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:0544 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTT...
HP System Event Utility Input Validation Error Vulnerability
HP System is a system event utility component. A security vulnerability exists in HP System Event Utility versions prior to 1.4.33. A local attacker can exploit this vulnerability to execute arbitrary code via the HP System Event Utility system service...
Important: Red Hat Security Advisory: sudo security update
An update for sudo is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
PT-2020-20414 · Linux · Lvm2
Name of the Vulnerable Software and Affected Versions: LVM2 version 2.02 Description: The issue is related to memory mismanagement in the vg lookup function in daemons/lvmetad/lvmetad-core.c, leading to a memory leak in lvmetad. This can be demonstrated by running the pvs command. Recommendations...
CVE-2019-18915
A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerability may allow a local attacker to execute arbitrary code via an HP System Event Utility system service...
CVE-2019-18915
A potential security vulnerability has been identified with certain versions of HP System Event Utility prior to version 1.4.33. This vulnerability may allow a local attacker to execute arbitrary code via an HP System Event Utility system service...