Huawei EulerOS: Security Advisory for kata-containers (EulerOS-SA-2021-1008)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP9 : kata-containers (EulerOS-SA-2021-1008)

According to the version of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting...

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in operating systems involves improper handling of file operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

The vulnerability of the Windows Backup Service allows attackers to exploit their privileges.

The vulnerability of the Windows Backup Service in operating systems involves improper handling of file operations. Exploiting this vulnerability can allow an attacker to increase their privileges...

Google Chrome Security Vulnerability

Google Chrome is a web browser from Google, Inc USA. A security vulnerability exists in versions prior to Google chrome 87.0.4280.66, which stems from an improper implementation in the file system...

CVE-2020-28914

An improper file permissions vulnerability affects Kata Containers prior to 1.11.5. When using a Kubernetes hostPath volume and mounting either a file or directory into a container as readonly, the file/directory is mounted as readOnly inside the container, but is still writable inside the guest...

CVE-2020-28914

Kata Containers prior to 1.11.5 are affected by CVE-2020-28914. When using a Kubernetes hostPath volume mounted readonly into a container, the file/directory is readonly inside the container but remains writable inside the guest, enabling potential container breakout and modification of files tha...

Medium: glib2

Issue Overview: filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress. Instead, default permissions are used. CVE-2019-12450 Affected Packages: glib2 Note: This advisory is applicable to Amazon Linux 2...

CentOS 7 : glib2 and ibus (RHSA-2020:3978)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:3978 advisory. - filecopyfallback in gio/gfile.c in GNOME GLib 2.15.0 through 2.61.1 does not properly restrict file permissions while a copy operation is in progress...

The vulnerability of the Windows operating system’s backup service allows attackers to exploit their privileges.

The vulnerability of the Windows operating system’s backup service is related to improper handling of file operations. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-16972

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

CVE-2020-16975

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

CVE-2020-16936

An elevation of privilege vulnerability exists when the Windows Backup Service improperly handles file operations. To exploit this vulnerability, an attacker would first have to gain execution on the victim system. An attacker could then run a specially crafted application to elevate privileges...

CVE-2020-0764

An elevation of privilege vulnerability exists when the Windows Storage Services improperly handle file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges. To exploit the vulnerability, an attacker would first need code execution on a victim syste...

PT-2020-4339 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to improper handling of file operations by the Windows Backup Service, which can lead to an elevation of privilege. This occurs due to errors in handling...

PT-2020-4321 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to an elevation of privilege vulnerability that exists when the Windows Backup Service improperly handles file operations. To exploit this, an attacker...

PT-2020-4276 · Microsoft · Windows Backup Service +1

Name of the Vulnerable Software and Affected Versions: Windows Backup Service affected versions not specified Description: The issue is related to the improper handling of file operations by the Windows Backup Service, which can allow an attacker to elevate their privileges. To exploit this, an...

Vulnerability of microprogramming software in server boards, server systems, and Intel computing modules, related to improper assignment of permissions for files, allowing attackers to increase their privileges

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the improper assignment of permissions for files. Exploiting this vulnerability can allow attackers to enhance their privileges...

B-swiss 3 Digital Signage System 3.6.5 Backdoor Remote Code Execution

!/usr/bin/env python3 -- coding: utf-8 -- B-swiss 3 Digital Signage System 3.6.5 Backdoor Remote Code Execution Vendor: B-Swiss SARL | b-tween Sarl Product web page: https://www.b-swiss.com Affected version: 3.6.5 3.6.2 3.6.1 3.6.0 3.5.80 3.5.40 3.5.20 3.5.00 3.2.00 3.1.00 Summary: Intelligent...

Palo Alto Networks PAN-OS Misconfiguration Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. A misconfiguration vulnerability exists in Palo Alto Networks PAN-OS. The vulnerability stems from an unreasonable file configuration, parameter configuration, etc. during the use of a...