Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2021-2336)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-1578

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller APIC and Cisco Cloud Application Policy Infrastructure Controller Cloud APIC could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected device. This vulnerability is d...

Design/Logic Flaw

A vulnerability in an API endpoint of Cisco Application Policy Infrastructure Controller APIC and Cisco Cloud Application Policy Infrastructure Controller Cloud APIC could allow an authenticated, remote attacker to elevate privileges to Administrator on an affected device. This vulnerability is d...

Dell EMC PowerScale OneFS Privilege Assignment Incorrect Vulnerability

Dell EMC PowerScale OneFS is an API-driven file system. version 8.2.-9.2. of Dell EMC PowerScale OneFS is vulnerable to incorrect privilege assignment. An attacker could exploit this vulnerability to elevate privileges...

Microsoft Windows Multiple Vulnerabilities (KB5005033)

This host is missing a critical security update according to Microsoft KB5005033 SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Privilege escalation

Dell PowerScale OneFS 9.1.0.x contains an improper privilege management vulnerability. It may allow an authenticated user with ISIPRIVLOGINSSH and/or ISIPRIVLOGINCONSOLE to elevate privilege...

PT-2021-14639 · Dell · Dell Emc Openmanage Enterprise-Modular +1

Name of the Vulnerable Software and Affected Versions: Dell OpenManage Enterprise versions 3.4 through 3.6.1 Dell OpenManage Enterprise Modular versions 1.20.00 through 1.30.00 Description: The issue is a remote code execution vulnerability. A malicious attacker with access to the immediate subne...

CVE-2021-1576

Cisco BPA web-based management interface (pre-3.1) contains privilege-escalation vulnerabilities due to improper authorization for specific features and log-file access. An attacker with valid credentials and an active session could elevate to Administrator by sending crafted HTTP requests or exf...

White Shark System (WSS) Unauthorized Access Vulnerability

White Shark System WSS is a browser-based collaboration platform that integrates Project Management, Task Management, Work Management and Work Log Management. Project Management", "Task Management", "Work Management" and "Work Log Management". An unauthorized access vulnerability exists in...

Exploit for Incorrect Authorization in Polkit_Project Polkit

polkit-auto-exploit Automatic Explotation PoC for Polkit CVE-2...

Logic Flaw Vulnerability in Skyrun VPN Client

Tianrongxin VPN Client is a VPN tool that establishes a remote secure access channel based on the Security Socket Layer protocol Security Socket Layer-SSL, which is able to protect the secure transmission of sensitive data in the Internet network, and realizes the secure access from mobile...

IBM Spectrum Protect Operations Center Arbitrary Code Execution Vulnerability

IBM Spectrum Protect is a suite of data protection platforms from IBM in the United States. An arbitrary code execution vulnerability exists in IBM Spectrum Protect Operations Center versions 7.1 and 8.1. The vulnerability stems from the program not properly validating parameters. An attacker cou...

Design/Logic Flaw

Multiple vulnerabilities in Cisco DNA Spaces Connector could allow an authenticated, local attacker to elevate privileges and execute arbitrary commands on the underlying operating system as root. These vulnerabilities are due to insufficient restrictions during the execution of affected CLI...

CVE-2021-1558

Cisco DNA Spaces Connector contains privilege-escalation and OS command-injection vulnerabilities. The root cause is insufficient restrictions during the execution of affected CLI commands, allowing an authenticated local attacker (from the dnasadmin context) to elevate privileges to root and exe...

CVE-2021-23134

Use After Free vulnerability in nfc sockets in the Linux Kernel before 5.12.4 allows local attackers to elevate their privileges. In typical configurations, the issue can only be triggered by a privileged local user with the CAPNETRAW capability...

Adobe Creative Cloud Desktop Application Uncontrolled Search Path Element Vulnerability

Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An uncontrolled search path element vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit the vulnerability to...

The vulnerability of the low-level platform Mendix, related to privilege management errors, allows a malicious actor to elevate their privileges and gain unauthorized access to protected information.

The vulnerability of the low-level platform Mendix is related to privilege management errors. Exploiting this vulnerability can allow an attacker operating remotely to enhance their privileges and gain unauthorized access to protected information...

Parallels Desktop OTG Heap Buffer Overflow Vulnerability

Parallels Desktop is a virtual machine software that runs on Mac computers. A heap buffer overflow vulnerability exists in the Open Tools Gate component in Parallels Desktop version 15.1.5-47309. The vulnerability stems from a failure to properly validate the length of user-supplied data before...

CVE-2020-9668

Adobe Genuine Service version 6.6 and earlier is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user...

Improper access control

Adobe Genuine Service version 6.6 and earlier is affected by an Improper Access control vulnerability when handling symbolic links. An unauthenticated attacker could exploit this to elevate privileges in the context of the current user...