1319 matches found
CVE-2021-1056: Incorrect Default Permissions
NVIDIA GPU Display Driver for Linux, all versions, contains a vulnerability in the kernel mode layer nvidia.ko in which it does not completely honor operating system file system permissions to provide GPU device-level isolation, which may lead to denial of service or information disclosure...
CVE-2020-28575: Out-of-bounds Write
A heap-based buffer overflow privilege escalation vulnerability in Trend Micro ServerProtect for Linux 3.0 may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute high-privileged code on the target in order to exploit this...
Trend Micro Serverprotect for Linux Buffer Overflow Vulnerability
Trend Micro Trend Micro Serverprotect for Linux is an antivirus program for enterprise environments from Trend Micro, USA. Trend Micro ServerProtect for Linux suffers from a buffer overflow vulnerability that can be exploited by an attacker who can trigger a buffer overflow to trigger a denial of...
PT-2020-17018
Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 Description A heap-based buffer overflow privilege escalation issue may allow an attacker to escalate privileges on affected installations. An attacker must first obtain the ability to execute...
CVE-2020-4739: Untrusted Search Path
IBM DB2 Accessories Suite for Linux, UNIX, and Windows, DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, 11.1, and 11.5 could allow a local authenticated attacker to execute arbitrary code on the system, caused by DLL search order hijacking vulnerability in Microsoft...
CVE-2020-4701: Buffer Copy without Checking Size of Input
IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 10.5, 11.1, and 11.5 is vulnerable to a buffer overflow, caused by improper bounds checking which could allow a local attacker to execute arbitrary code on the system with root privileges...
PT-2020-18210
Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 10.5, 11.1, and 11.5 Description The issue is caused by improper bounds checking, leading to a buffer overflow. This could allow a local attacker to execute arbitrary cod...
CVE-2020-12333: Insufficiently Protected Credentials
Insufficiently protected credentials in the IntelR QAT for Linux before version 1.7.l.4.10.0 may allow an authenticated user to potentially enable escalation of privilege via local access...
PT-2020-4913
Name of the Vulnerable Software and Affected Versions: IntelR QAT for Linux versions prior to 1.7.l.4.10.0 Description: The issue is related to insufficiently protected credentials in the IntelR QAT for Linux, which may allow an authenticated user to potentially enable escalation of privilege via...
CVE-2020-9861
A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...
PT-2020-20813
Name of the Vulnerable Software and Affected Versions Swift for Linux affected versions not specified Description A stack overflow issue existed due to deeply nested malicious JSON input. The issue was addressed with improved input validation. Recommendations At the moment, there is no informatio...
CVE-2020-9861: Uncontrolled Recursion
A stack overflow issue existed in Swift for Linux. The issue was addressed with improved input validation for dealing with deeply nested malicious JSON input...
Veeam Agent for Linux - Expired Sectigo RootCA Certificates
Challenge Veeam Agent for Linux connecting to a Cloud Repository with a seemingly valid Cloud certificate fails with "certificate has expired". Cause On May 30th of 2020, Sectigo had an expired Root CA that will not be updated due to the age of the certificate...
PT-2020-15736
Name of the Vulnerable Software and Affected Versions Trend Micro ServerProtect for Linux version 3.0 Description A command injection issue could allow an attacker to execute arbitrary code on an affected system. The attacker must first obtain admin/root privileges on the SPLX console to exploit...
CVE-2020-24561: Improper Neutralization of Special Elements used in a Command
A command injection vulnerability in Trend Micro ServerProtect for Linux 3.0 could allow an attacker to execute arbitrary code on an affected system. An attacker must first obtain admin/root privileges on the SPLX console to exploit this vulnerability...
CVE-2020-15590
A vulnerability in the Private Internet Access PIA VPN Client for Linux 1.5 through 2.3+ allows remote attackers to bypass an intended VPN kill switch mechanism and read sensitive information via intercepting network traffic. Since 1.5, PIA has supported a “split tunnel” OpenVPN bypass option. Th...
PT-2020-14516
Name of the Vulnerable Software and Affected Versions Private Internet Access PIA VPN Client for Linux versions 1.5 through 2.3 Description A vulnerability in the Private Internet Access PIA VPN Client for Linux allows remote attackers to bypass an intended VPN kill switch mechanism and read...
PT-2020-20217
Name of the Vulnerable Software and Affected Versions Active IQ Unified Manager for Linux versions prior to 9.6 Description The issue allows unauthorized code execution to local users due to the Java Management Extension Remote Method Invocation JMX RMI service being enabled. Recommendations For...
CVE-2020-8574: Undefined Security Weakness
Active IQ Unified Manager for Linux versions prior to 9.6 ship with the Java Management Extension Remote Method Invocation JMX RMI service enabled allowing unauthorized code execution to local users...
