CVE-2021-27032

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

Privilege escalation

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

CVE-2021-27032

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

CVE-2021-27032

CVE-2021-27032 concerns Autodesk Licensing Installer/Service. The issue is a local privilege-escalation vulnerability where a user with limited privileges can identify and modify services running with elevated permissions, potentially owning the service due to weak service permissions. Impact des...

CVE-2021-27032

Autodesk Licensing Installer was found to be vulnerable to privilege escalation issues. A malicious user with limited privileges could run any number of tools on a system to identify services that are configured with weak permissions and are running under elevated privileges. These weak permissio...

Autodesk Licensing Services 访问控制错误漏洞

Autodesk Licensing Services is a licensing service of the American company Autodesk. An Access Control Error vulnerability exists in Autodesk Licensing Services, which originates from a malicious user with restricted privileges can run any number of tools on the system to identify services...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a permissions licensing and access control issue, which arises from an application not properly securing the WiFi component. The following products and versions are...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a permissions licensing and access control issue, which arises from the Tailspin component not properly applying security restrictions. 10.14.4 18E226, 10.14.4 18E227,...

VulnCheck KEV: CVE-2021-22893

Ivanti Pulse Connect Secure contains a use-after-free vulnerability that allow a remote, unauthenticated attacker to execute code via license services...

ADC Fails To Connect To ADM for Pooled Licensing

When trying to add the ADC to the ADM for Pooled Licensing, or CPU based licensing, or anything that uses ADM as the license server, you receive an errror. Error might be "Unable to connect to licenseserver" or "Registration of device failed"...

AM Live Vulnerability Management Conference Part 1: Full video in Russian + Timecodes in English

Hello all! 2 weeks ago I participated in the best online event fully dedicated to Vulnerability Management in Russia. It was super fun and exciting. Thanks to all the colleagues and especially to Lev Paley for the great moderation! I have talked out completely. Everything I wanted and the way I...

Citrix license files shows a warning symbol on the SA date in the Licensing tab on Studio

The Subscription advantage date for a license shows a warning symbol-...

Vulners Linux Audit API for Host Vulnerability Detection: Manual Auditing, Python Scripting and Licensing

Hello everyone! This episode will be about Vulners Linux Audit API, which allows you to detect vulnerabilities on a Linux host knowing only the OS version and installed packages. I had a similar post about this 4 years ago, but some details have changed, so I came back to this topic. Manual Audit...

Linux kernel code issue vulnerability

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A code issue vulnerability exists in the Linux kernel that arises from a lack of effective privilege licensing and access control measures in a networked system or product...

Huawei Smartphone Licensing Issues Vulnerabilities

Huawei Emui is an Android-based mobile operating system from China's Huawei.Honor Magic Ui is an Android-based mobile operating system from China's Honor. Huawei smartphones have a security vulnerability that can be exploited by attackers to gain access to low-sensitive information...

Microsoft Windows Licensing Issues Vulnerabilities

Microsoft Windows is an operating system for personal devices from Microsoft Corporation. There is a license issue vulnerability in Microsoft Windows, no information about this vulnerability is available at this time, please stay tuned to CNNVD or vendor announcements. The following products and...

Security Bulletin: NVIDIA GPU Display Driver - January 2021

NVIDIA has released a software security update for NVIDIA® GPU Display Driver. This update addresses issues that may lead to denial of service, escalation of privileges, data tampering, or information disclosure. To protect your system, download and install this software update from the NVIDIA...

Security update for privoxy (moderate)

openSUSE Security Update: Security update for privoxy Announcement ID: openSUSE-SU-2021:0006-1 Rating: moderate References: 1157449 Affected Products: openSUSE Leap 15.2 openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for privoxy fixes the...

Microsoft Warns CrowdStrike of Hackers Targeting Azure Cloud Customers

New evidence amidst the ongoing probe into the espionage campaign targeting SolarWinds has uncovered an unsuccessful attempt to compromise cybersecurity firm Crowdstrike and access the company's email. The hacking endeavor was reported to the company by Microsoft's Threat Intelligence Center on...

CVE-2020-9439

Multiple cross-site scripting XSS vulnerabilities in Uncanny Owl Tin Canny LearnDash Reporting before 3.4.4 allows authenticated remote attackers to inject arbitrary web script or HTML via the searchkey GET Parameter in TinCanContentListTable.php, message GET Parameter in licensing.php,...