Lucene search
+L

2392 matches found

RedHat Linux
RedHat Linux
•added 2020/04/28 3:53 p.m.•16 views

glibc: LD_PREFER_MAP_32BIT_EXEC not ignored in setuid binaries

A vulnerability was discovered in glibc where the LDPREFERMAP32BITEXEC environment variable is not ignored when running binaries with the setuid flag on x8664 architectures. This allows an attacker to force system to utilize only half of the memory making the system think the software is 32-bit...

3.3CVSS7AI score0.00409EPSS
SaveExploits0References4
CNVD
CNVD
•added 2020/04/16 12:00 a.m.•17 views

Microsoft AutoUpdate for Mac Privilege Vulnerability

Microsoft AutoUpdate for Mac is an automatic update component for Mac. An elevation of privilege vulnerability exists in Microsoft AutoUpdate for Mac, which originates when the program fails to properly validate updates before executing them, and can be exploited by an attacker with the help of...

7.8CVSS7.2AI score0.0099EPSS
SaveExploits0References1
CNVD
CNVD
•added 2020/04/16 12:00 a.m.•20 views

Unspecified Vulnerability in Ascensio System ONLYOFFICE Document Server

Ascensio System ONLYOFFICE Document Server is an online office collaboration suite from Ascensio System, Latvia. The product supports viewing and editing of text, spreadsheets and presentations, among others. A security vulnerability exists in Ascensio System ONLYOFFICE Document Server version...

9.8CVSS7.2AI score0.02318EPSS
SaveExploits0References1
Exploit DB
Exploit DB
•added 2020/04/16 12:00 a.m.•206 views

VMware Fusion - USB Arbitrator Setuid Privilege Escalation (Metasploit)

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'VMware Fusion USB Arbitrator Setuid Privilege Escalation', 'Description' = %q This exploits an improper use of setuid binaries within VMware Fusi...

7.8CVSS7.4AI score0.07254EPSS
SaveExploits10
NVD
NVD
•added 2020/04/15 3:15 p.m.•25 views

CVE-2020-1019

An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability'...

7.8CVSS7.7AI score0.00933EPSS
SaveExploits0References1
NVD
NVD
•added 2020/04/15 3:15 p.m.•35 views

CVE-2020-0919

An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'...

7.8CVSS7.8AI score0.00788EPSS
SaveExploits0References1
Prion
Prion
•added 2020/04/15 3:15 p.m.•33 views

Privilege escalation

An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'...

4.6CVSS7.7AI score0.00788EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/15 3:13 p.m.•31 views

CVE-2020-1019

An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability'...

7.7AI score0.00933EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2020/04/15 3:12 p.m.•45 views

CVE-2020-0919

An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'...

7.8AI score0.00788EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•4 views

CVE-2020-1019: Undefined Security Weakness

An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability'...

7.8CVSS7.3AI score0.00933EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/04/15 12:00 a.m.•5 views

CVE-2020-0919: Undefined Security Weakness

An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries, aka 'Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability'...

7.8CVSS7.3AI score0.00788EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
•added 2020/04/14 7:00 a.m.•50 views

Microsoft Remote Desktop App for Mac Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in Remote Desktop App for Mac in the way it allows an attacker to load unsigned binaries. An attacker could then install programs; view, change, or delete data with the logged in user's privileges. To exploit this vulnerability, an attacker would hav...

7.8CVSS3.6AI score0.00788EPSS
SaveExploits0
Microsoft CVE
Microsoft CVE
•added 2020/04/14 7:00 a.m.•28 views

Microsoft RMS Sharing App for Mac Elevation of Privilege Vulnerability

An elevation of privilege vulnerability exists in RMS Sharing App for Mac in the way it allows an attacker to load unsigned binaries. An attacker could then install programs; view, change, or delete data with the logged in user's privileges. To exploit this vulnerability, an attacker would first...

7.8CVSS3.2AI score0.00933EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2020/04/14 12:00 a.m.•17 views

PT-2020-2256

Name of the Vulnerable Software and Affected Versions Microsoft Remote Desktop App for Mac affected versions not specified Description The issue is related to insufficient access restrictions in the Microsoft Remote Desktop App for Mac, allowing an attacker to elevate their privileges. This can b...

7.8CVSS5.5AI score0.00788EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2020/04/14 12:00 a.m.•5 views

PT-2020-2151

Name of the Vulnerable Software and Affected Versions Microsoft RMS Sharing App for Mac affected versions not specified Description The issue is related to insecure privilege management in the Microsoft RMS Sharing App for Mac, allowing an attacker to load unsigned binaries. This could enable an...

7.8CVSS5.8AI score0.00933EPSS
SaveExploits0References4
Veracode
Veracode
•added 2020/04/10 12:54 a.m.•43 views

Denial Of Service (DoS)

glibc is vulnerable to privilege escalation. It was discovered that the glibc dynamic linker/loader did not handle the $ORIGIN dynamic string token set in the LDAUDIT environment variable securely. A local attacker with write access to a file system containing setuid or setgid binaries could use...

6.9CVSS2.8AI score0.09489EPSS
SaveExploits21References25Affected Software1
Veracode
Veracode
•added 2020/04/10 12:13 a.m.•44 views

Information Disclosure

The Linux kernel is vulnerable to Information Disclosure.A flaw in the core-dump handling allows a local user to create core dumps from unreadable binaries via PTINTERP...

2.1CVSS1.6AI score0.00406EPSS
SaveExploits0References22Affected Software1
Microsoft KB
Microsoft KB
•added 2020/04/10 12:00 a.m.•13 views

Binary files in some USB drivers are not updated after you install Windows 7 SP1 or Windows Server 2008 R2 SP1

Binary files in some USB drivers are not updated after you install Windows 7 SP1 or Windows Server 2008 R2 SP1 If you are a Small Business customer, find additional troubleshooting and learning resources at the Support for Small Business site. Symptoms After you install Windows 7 Service Pack 1 S...

5.5AI score
SaveExploits0
OSV
OSV
•added 2020/04/08 2:33 p.m.•9 views

USN-4326-1 libiberty vulnerabilities

It was discovered that libiberty incorrectly handled parsing certain binaries. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could use this issue to cause libiberty to crash, resulting in a denial of service, or possibly execute arbitrary...

7.8CVSS7.2AI score0.06606EPSS
SaveExploits11References15
Veracode
Veracode
•added 2020/04/03 12:40 a.m.•55 views

Arbitrary Code Execution

kernel is vulnerable to arbitrary code execution. The vulnerability exists through an ASLR bypass for setuid binaries due to late installexeccreds...

4.7CVSS3.8AI score0.00481EPSS
SaveExploits1References23Affected Software2
Rows per page
Query Builder