CVE-2021-26563

Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors...

Authorization

Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors...

CVE-2021-26563

CVE-2021-26563 affects Synology DiskStation Manager (DSM) with the synoagentregisterd component, prior to DSM 6.2.4-25553. The root cause is an incorrect/improper access control that allows local users to execute arbitrary code via unspecified vectors, potentially enabling root access. In TALOS-2...

CVE-2021-26563

Incorrect authorization vulnerability in synoagentregisterd in Synology DiskStation Manager DSM before 6.2.4-25553 allows local users to execute arbitrary code via unspecified vectors...

EulerOS 2.0 SP2 : irssi (EulerOS-SA-2021-1306)

According to the version of the irssi package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - The buf.pl script before 2.20 in Irssi before 0.8.20 uses weak permissions for the scrollbuffer dump file created between upgrades, which might allow...

CVE-2020-24908

CVE-2020-24908 affects Checkmk before 1.6.0p17. A Trojan horse shell script in %PROGRAMDATA%\checkmk\agent\local allows local users to escalate to SYSTEM privileges. Root cause: manipulation of a local agent script executed with high privileges. Impact: local privilege escalation to SYSTEM. Remed...

CVE-2020-24908: Undefined Security Weakness

Checkmk before 1.6.0p17 allows local users to obtain SYSTEM privileges via a Trojan horse shell script in the %PROGRAMDATA%\checkmk\agent\local directory...

CVE-2020-12372

Unchecked return value in some IntelR Graphics Drivers before version 26.20.100.8141 may allow a privileged user to potentially enable a denial of service via local access...

CVE-2020-9453

In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...

CVE-2020-10553

An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen aka screensaver of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify...

CVE-2020-10553

An issue was discovered in Psyprax before 3.2.2. The file %PROGRAMDATA%\Psyprax32\PPScreen.ini contains a hash for the lockscreen aka screensaver of the application. If that entry is removed, the lockscreen is no longer displayed and the app is no longer locked. All local users are able to modify...

CVE-2020-10553

Psyprax before 3.2.2 is affected. The PPScreen.ini file in %PROGRAMDATA%\Psyprax32 contains a hash for the application’s lockscreen. If the entry is removed, the lockscreen is not displayed and the application is no longer locked. All local users can modify this file, enabling potential bypass of...

CVE-2020-18750

Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file...

CVE-2020-18750

Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file...

Input validation

In Epson iProjection v2.30, the driver file EMPNSAU.sys allows local users to cause a denial of service BSOD via crafted input to the virtual audio device driver with IOCTL 0x9C402402, 0x9C402406, or 0x9C40240A. \Device\EMPNSAUIO and \DosDevices\EMPNSAU are similarly affected...

CVE-2020-9453

In Epson iProjection v2.30, the driver file EMPMPAU.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x9C402406 and IOCtl 0x9C40240A. 0x9C402402 has only a NULL pointer dereference. This affects...

CVE-2020-9453

The CVE-2020-9453 issue affects Epson iProjection v2.30 via the driver EMP_MPAU.sys, where input validation fails for IOCTL codes 0x9C402406 and 0x9C40240A. This can allow local users to trigger a denial of service (BSOD) and potentially other impact on devices \Device\EMPMPAUIO and \DosDevices\E...

CVE-2020-12122

In Max Secure Max Spyware Detector 1.0.0.044, the driver file MaxProc64.sys allows local users to cause a denial of service BSOD or possibly have unspecified other impact because of not validating input values from IOCtl 0x2200019. This also extends to the various other products from Max Secure...

CVE-2020-18750

Buffer overflow in pdf2json 0.69 allows local users to execute arbitrary code by converting a crafted PDF file...

CVE-2020-18750

CVE-2020-18750: Buffer overflow in pdf2json 0.69 can allow local users to execute arbitrary code by converting a crafted PDF file. The issue is triggered during PDF processing in pdf2json, with local access required. The available connected documents do not provide explicit exploit details, affec...