8124 matches found
CVE-2021-22804
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause disclosure of arbitrary files being read in the context of the user running IGSS, due to missing validation of user supplied data in network messages. Affected Product: Interactive Graphica...
CVE-2021-30317
Improper validation of program headers containing ELF metadata can lead to image verification bypass in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voi...
CVE-2022-23853
The LSP Language Server Protocol plugin in KDE Kate before 21.12.2 and KTextEditor before 5.91.0 tries to execute the associated LSP server binary when opening a file of a given type. If this binary is absent from the PATH, it will try running the LSP server binary in the directory of the file th...
Memory corruption
A vulnerability has been identified in JT2Go All versions V13.2.0.7, Solid Edge SE2021 All versions SE2021MP9, Solid Edge SE2022 All versions SE2022MP1, Teamcenter Visualization V13.1 All versions V13.1.0.9, Teamcenter Visualization V13.2 All versions V13.2.0.7, Teamcenter Visualization V13.3 All...
UBUNTU-CVE-2022-22756
If a user was convinced to drag and drop an image to their desktop or other folder, the resulting object could have been changed into an executable script which would have run arbitrary code after the user clicked on it. This vulnerability affects Firefox 97, Thunderbird 91.6, and Firefox ESR 91....
JVN#12969207: HPE Agentless Management registers unquoted service paths
HP Agentless Management provided by Hewlett Packard Enterprise registers some Windows services with unquoted file paths CWE-428. Impact When a registered Windows service path contains spaces and is unquoted, and a malicious executable is placed on a certain path, the executable may be executed wi...
Security Vulnerabilities fixed in Thunderbird 91.6 — Mozilla
A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.This bug only affects Thunderbird on Windows. Other operating systems are unaffected. If a...
Security Vulnerabilities fixed in Firefox ESR 91.6 — Mozilla
A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.This bug only affects Firefox on Windows. Other operating systems are unaffected. If a user...
Cisco RV340 SSL VPN Unauthenticated Remote Code Execution
This module exploits a stack buffer overflow in the Cisco RV series routers SSL VPN functionality. The default SSL VPN configuration is exploitable, with no authentication required and works over the Internet! The stack is executable and no ASLR is in place, which makes exploitation easier...
McAfee Agent cleanup.exe Command Execution
The vulnerability of the cleanup.exe executable of the McAfee Agent antivirus software is related to inadequate code generation management. Exploiting this vulnerability allows an attacker to execute arbitrary commands...
Exploit for Out-of-bounds Write in Polkit_Project Polkit
ez-pwnkit A pure-Go implementation of the CVE-2021-4034 Pwn...
McAfee Agent Command Injection Vulnerability
The McAfee McAfee Agent MA is a set of client components from McAfee, Inc. that provides secure communications between ePolicy Orchestrator the antivirus management platform and managed products. A security vulnerability exists in the McAfee Agent that originates from allowing a local user to...
Solana Rbpf input validation vulnerability
Solana Rbpf is a Rust Virtual Machine and Jit compiler for Ebpf programs from the Solana Foundation in Switzerland. An input validation error vulnerability exists in Solana Rbpf versions 0.2.14 through 0.2.16, which stems from an integer overflow error in the call to the relocate function in...
CVE-2021-40167
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...
CVE-2021-40167
A malicious crafted dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by read access violation. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...
WinVerifyTrust Signature Validation Vulnerability
Why is Microsoft republishing a CVE from 2013? We are republishing CVE-2013-3900 in the Security Update Guide to update the Security Updates table and to inform customers that the EnableCertPaddingCheck is available in all currently supported versions of Windows 10 and Windows 11. While the forma...
CVE-2021-31854
A command Injection Vulnerability in McAfee Agent MA for Windows prior to 5.7.5 allows local users to inject arbitrary shell code into the file cleanup.exe. The malicious clean.exe file is placed into the relevant folder and executed by running the McAfee Agent deployment feature located in the...
CVE-2021-22566 Incorrect mapping of Executable bits in Fuchsia Kernel
An incorrect setting of UXN bits within mmuflagstos1pteattr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits...
CVE-2021-22566 Incorrect mapping of Executable bits in Fuchsia Kernel
An incorrect setting of UXN bits within mmuflagstos1pteattr lead to privileged executable pages being mapped as executable from an unprivileged context. This can be leveraged by an attacker to bypass executability restrictions of kernel-mode pages from user-mode. An incorrect setting of PXN bits...
Siemens SICAM PQ Analyzer Search Path Vulnerability
SICAM PQ Analyzer is a power quality system software that provides options for evaluating archived PQ measurement data and fault records. A search path vulnerability exists in Siemens SICAM PQ Analyzer, which can be exploited by an attacker with write privileges to plant an executable that will r...