9342 matches found
Security Bulletin: Vulnerabilities in PHP may affect IBM Spectrum Sentinel Anomaly Scan Engine (CVE-2021-21703, CVE-2021-21708, CVE-2021-21707, CVE-2022-31629, CVE-2022-31628)
Summary Vulnerabilities in PHP may affect IBM Spectrum Sentinel Anomaly Scan Engine. Vulnerabilities include: PHP allowing remote attacker to execute arbitrary code, obtain sensitive information, local authenticated attacker gain elevated privileges on the system, cross-site request forgery and...
PT-2022-26880 · Ibm · Vios +1
Name of the Vulnerable Software and Affected Versions: IBM AIX versions 7.1 through 7.3 VIOS version 3.1 Description: The issue allows a local user with elevated privileges to exploit a vulnerability in the lpd daemon, causing a denial of service. Recommendations: For IBM AIX versions 7.1 through...
Vulnerabilities fixed in Microsoft Azure
Vulnerabilities have been fixed in Microsoft Azure. The vulnerabilities allow a malicious party to carry out attacks execute attacks that result in the following categories of damage: Denial-of-Service DoS Circumvention of security measure Increased user privileges The tables below provide an...
Vulnerabilities fixed in Microsoft Edge
Vulnerabilities have been fixed in Microsoft Edge. The vulnerabilities allow a malicious person to impersonate as another user or obtain elevated privileges. Microsoft Edge Chromium-based: |----------------|------|-------------------------------------| | CVE ID | CVSS | Impact |...
Siemens Simcenter STAR-CCM+
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services ...
CVE-2022-43517
A vulnerability has been identified in Simcenter STAR-CCM+ All versions V2306. The affected application improperly assigns file permissions to installation folders. This could allow a local attacker with an unprivileged account to override or modify the service executables and subsequently gain...
Siemens SCALANCE Products
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...
Vulnerabilities fixed in SAP products
Vulnerabilities have been fixed in several SAP products. The vulnerabilities allow a malicious person to carry out attacks execute attacks that result in the following categories of damage: Cross-Site Scripting XSS Denial-of-Service DoS. Bypassing authentication Remote code execution User Rights...
CVE-2022-43517
CVE-2022-43517 – Simcenter STAR-CCM+ affects all versions prior to V2306. The vulnerability arises from incorrect file/installation-folder permissions, enabling a local unprivileged user to override or modify service executables and gain elevated privileges (CVSS v3.1 base score 7.8). Public refe...
Google Android Elevation of Privilege Vulnerability (CNVD-2023-07647)
Google Android is a Linux-based open source operating system from Google, Inc. An elevation of privilege vulnerability exists in Google Android due to a resource exhaustion vulnerability in the NotificationChannel.java component. The vulnerability can be exploited by attackers to gain elevated...
The vulnerability of the network socket of the VMware ESXi hypervisor allows a attacker to execute arbitrary code with elevated privileges.
The vulnerability of the VMware ESXi hypervisor’s network socket is related to the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability allows an attacker to execute arbitrary code with elevated privileges...
Google Android elevation of privilege vulnerability (CNVD-2022-89770)
Google Android is a Linux-based open source operating system from Google. Google Android suffers from an elevation of privilege vulnerability that can be exploited by an attacker to gain elevated privileges...
PT-2022-5817 · Vmware · Vmware Esxi
Name of the Vulnerable Software and Affected Versions: VMware ESXi affected versions not specified Description: The issue is related to a memory corruption vulnerability in the way VMware ESXi handles a network socket. A malicious actor with local access to ESXi may exploit this issue to corrupt...
D-Link DVG-G5402SP Access Control Error Vulnerability
D-Link DVG-G5402SP is a wireless router from China Youxun D-Link. The D-Link DVG-G5402SP is vulnerable to an access control error, which can be exploited by an unauthenticated attacker to achieve elevated privileges by editing arbitrary VoIP SIB files...
CVE-2022-27773
A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...
CVE-2022-27773
A privilege escalation vulnerability is identified in Ivanti EPM LANDesk Management Suite that allows a user to execute commands with elevated privileges...
Security Bulletin: IBM QRadar SIEM Appliances could be vulnerable to multiple Intel CVEs
Summary IBM QRadar SIEM Appliances could be vulnerable to multiple Intel CVEs. IBM has addressed the relevant CVEs. Vulnerability Details CVEID:CVE-2021-0091 DESCRIPTION: Intel Processors could allow a local attacker to gain elevated privileges on the system, caused by improper access control in...
Ivanti LANDESK Management Suite 安全漏洞
Ivanti LANDESK Management Suite LDMS is a suite of endpoint security management software from Ivanti Corporation, USA. A security vulnerability exists in Ivanti LANDESK Management Suite that originates from allowing a user to execute commands with elevated privileges...
PT-2022-18577 · Ivanti · Ivanti Epm
Name of the Vulnerable Software and Affected Versions: Ivanti EPM LANDesk Management Suite affected versions not specified Description: A privilege escalation issue is identified that allows a user to execute commands with elevated privileges. Recommendations: At the moment, there is no informati...
WordPress Simple:Press plugin arbitrary file modification vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An arbitrary file...