21897 matches found
CVE-2020-36771
CloudLinux CageFS 7.1.1-1 or below passes the authentication token as a command line argument. In some configurations this allows local users to view the authentication token via the process list and gain code execution as another user...
CVE-2024-23770
darkhttpd through 1.15 allows local users to discover credentials for --auth by listing processes and their arguments...
ALPINE-CVE-2024-23770
darkhttpd through 1.15 allows local users to discover credentials for --auth by listing processes and their arguments...
darkhttpd security vulnerability
darkhttpd is a software application. When you need a web server. A security vulnerability exists in darkhttpd version 1.15 and earlier that stems from allowing local users to discover credentials by listing processes and their parameters...
PT-2024-10824 · Cloudlinux · Cloudlinux Cagefs
Name of the Vulnerable Software and Affected Versions: CloudLinux CageFS versions 7.0.8-2 and below Description: The issue allows local users to read and write arbitrary files of certain file formats outside the CageFS environment due to insufficient restrictions on file paths supplied to the...
PT-2024-10823 · Cloudlinux · Cloudlinux Cagefs
Name of the Vulnerable Software and Affected Versions: CloudLinux CageFS versions 7.1.1-1 and below Description: The issue allows local users to view the authentication token via the process list and gain code execution as another user, because the authentication token is passed as a command line...
UBUNTU-CVE-2024-0639
A denial of service vulnerability due to a deadlock was found in sctpautoasconfinit in net/sctp/socket.c in the Linux kernel’s SCTP subsystem. This flaw allows guests with local user privileges to trigger a deadlock and potentially crash the system...
CVE-2023-6457
Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows Hitachi Tuning Manager server component allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-04...
CVE-2023-6457
Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows Hitachi Tuning Manager server component allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-04...
Design/Logic Flaw
Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows Hitachi Tuning Manager server component allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-04...
CVE-2023-6457 File and Directory Permission Vulnerability in Hitachi Tuning Manager
Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows Hitachi Tuning Manager server component allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-04...
CVE-2023-6457 File and Directory Permission Vulnerability in Hitachi Tuning Manager
Incorrect Default Permissions vulnerability in Hitachi Tuning Manager on Windows Hitachi Tuning Manager server component allows local users to read and write specific files.This issue affects Hitachi Tuning Manager: before 8.8.5-04...
EulerOS 2.0 SP8 : screen (EulerOS-SA-2023-3159)
According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users...
EulerOS 2.0 SP11 : screen (EulerOS-SA-2023-2667)
According to the versions of the screen package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD, allows local users...
EulerOS Virtualization 3.0.6.0 : screen (EulerOS-SA-2023-3455)
According to the versions of the screen package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - socket.c in GNU Screen through 4.9.0, when installed setuid or setgid the default on platforms such as Arch Linux and FreeBSD,...
EulerOS 2.0 SP10 : cpio (EulerOS-SA-2023-3167)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an...
EulerOS 2.0 SP11 : cpio (EulerOS-SA-2023-3265)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an...
EulerOS 2.0 SP10 : cpio (EulerOS-SA-2023-3202)
According to the versions of the cpio package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an...
AIX 3.1 TL 3 : kernel (IJ49533)
https://vulners.com/cve/CVE-2023-45175 IBM AIX could allow a non-privileged local user to exploit a vulnerability in the TCP/IP kernel extension to cause a denial of service. IBM AIX could allow a non-privileged local user to exploit a vulnerability in the NFS kernel extension to cause a denial o...
IBM Security Access Manager Appliance Security Vulnerability
IBM Security Access Manager Appliance ISAM Appliance is a network appliance-based security solution from International Business Machines IBM. The product is primarily used for access control and Web-based threat protection, providing system performance monitoring, log analysis and diagnostics. A...