CVE-2020-20471

White Shark System WSS 1.3.2 has an unauthorized access vulnerability in defaultuseredit.php, remote attackers can exploit this vulnerability to escalate to admin privileges...

Dell OpenManage Enterprise OS Command Injection Vulnerability

Dell OpenManage Enterprise is an easy-to-use, one-to-many system management console for IT infrastructure management from Dell, Inc. Dell OpenManage Enterprise-Modular is vulnerable to an operating system command injection vulnerability that could be exploited by an attacker to bypass restriction...

CVE-2021-31997

A UNIX Symbolic Link Symlink Following vulnerability in python-postorius of openSUSE Leap 15.2, Factory allows local attackers to escalate from users postorius or postorius-admin to root. This issue affects: openSUSE Leap 15.2 python-postorius version 1.3.2-lp152.1.2 and prior versions. openSUSE...

Backdoor.Win32.Wuca.nz Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/378b225b07979e12062f86ab1fbaf2ed.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Wuca.nz Vulnerability: Insecure Permissions Description: The malware creates a VBS...

Design/Logic Flaw

A vulnerability has been identified in Mendix SAML Module All versions V2.1.2. The configuration of the SAML module does not properly check various restrictions and validations imposed by an identity provider. This could allow a remote authenticated attacker to escalate privileges...

CVE-2021-32460

The Trend Micro Maximum Security 2021 v17 consumer product is vulnerable to an improper access control vulnerability in the installer which could allow a local attacker to escalate privileges on a target machine. Please note than an attacker must already have local user privileges and access on t...

QEMU Buffer Overflow Vulnerability (CNVD-2021-39109)

QEMU Quick Emulator is a set of simulation processor software by Fabrice Bellard, a French individual developer. The software is fast and cross-platform. QEMU suffers from a buffer overflow vulnerability that originates from a boundary error in the virglcmdgetcapset function of...

Ubuntu: Security Advisory (USN-4972-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

kernel: nitro_enclaves stale file descriptors on failed usercopy

A flaw null pointer dereference in the Nitro Enclaves kernel driver was found in the way that Enclaves VMs forces closures on the enclave file descriptor. A local user of a host machine could use this flaw to crash the system or escalate their privileges on the system...

Red Hat, Inc. Nitro Enclaves内核驱动 资源管理错误漏洞

Nitro Enclaves is a new Amazon Elastic Compute Cloud feature from Amazon that allows the creation of standalone compute environments. Red Hat, Inc. has a security vulnerability in the Nitro Enclaves kernel driver that stems from a null pointer dereference flaw found in the Nitro Enclaves kernel...

CVE-2020-10695

An insecure modification flaw in the /etc/passwd file was found in the redhat-sso-7 container. An attacker with access to the container can use this flaw to modify the /etc/passwd and escalate their privileges...

VMware Workstation ThinPrint JPEG2000 Out-Of-Bounds Read Information Disclosure Vulnerability

This vulnerability allows local attackers to disclose sensitive information on affected installations of VMware Workstation. An attacker must first obtain the ability to execute low-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within...

CVE-2021-24289

There is functionality in the Store Locator Plus for WordPress plugin through 5.5.14 that made it possible for authenticated users to update their user meta data to become an administrator on any site using the plugin...

USN-4955-1: Please vulnerabilities

Matthias Gerstner discovered that Please contained multiple security issues. A local attacker could use these issues to cause Please to crash, resulting in a denial of service, or possibly escalate privileges...

Adobe Media Encoder < 15.2 Privilege escalation (APSB21-32)

The version of Adobe Media Encoder installed on the remote Windows host is prior to 15.2. It is, therefore, affected by a vulnerability as referenced in the APSB21-32 advisory. - Adobe Media Encoder version 15.1 and earlier is affected by an Out-of-bounds Read vulnerability when parsing a special...

Information disclosure

An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a...

Information disclosure

An incorrect permission vulnerability in the product installer folders for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is...

CVE-2021-3489

A flaw out of bound memory write in the Linux kernel BPF subsystem was found in the way user writes to BPF ring buffer too fast, so larger buffer than available memory could be allocated. A local user could use this flaw to crash the system or possibly escalate their privileges on the system...

Backdoor.Win32.Floder.gqe Insecure Permissions

Discovery / credits: Malvuln - malvuln.com c 2021 Original source: https://malvuln.com/advisory/0629e3b2ab8a973a3e37e4e97cb9cfea.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Backdoor.Win32.Floder.gqe Vulnerability: Insecure Permissions Description: The malware creates an...

Ubuntu: Security Advisory (USN-4934-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...