23245 matches found
CVE-2020-26947
monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH with a preference ahead of /usr/lib, which allows local users to gain privileges via a Trojan horse library in the current working directory...
CVE-2020-26947
monero-wallet-gui in Monero GUI before 0.17.1.0 includes the . directory in an embedded RPATH with a preference ahead of /usr/lib, which allows local users to gain privileges via a Trojan horse library in the current working directory...
CVE-2020-7316
CVE-2020-7316 maps to an Unquoted service path vulnerability in McAfee File and Removable Media Protection (FRP) prior to 5.3.0. A local attacker could run code with higher privileges by exploiting an unquoted service path and from a compromised folder; this may also cause files to avoid encrypti...
CVE-2020-10762
An information-disclosure flaw was found in the way that gluster-block logs the output from gluster-block CLI operations. This includes recording passwords to the cmdhistory.log file which is world-readable. This flaw allows local users to obtain sensitive information by reading the log file. The...
gluster-block: information disclosure through world-readable gluster-block log files
An information-disclosure flaw was found in the way that gluster-block logs the output from gluster-block CLI operations. This includes recording passwords to the cmdhistory.log file which is world-readable. This flaw allows local users to obtain sensitive information by reading the log file. The...
QEMU: seccomp: blacklist is not applied to all threads
qemu-seccomp.c in QEMU might allow local OS guest users to cause a denial of service guest crash by leveraging mishandling of the seccomp policy for threads other than the main thread...
Huawei EulerOS: Security Advisory for keepalived (EulerOS-SA-2020-2123)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP3 : libplist (EulerOS-SA-2020-2125)
According to the versions of the libplist package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - The parsestringnode function in bplist.c in libimobiledevice libplist 1.12 allows local users to cause a denial of service memory allocation...
EulerOS 2.0 SP3 : keepalived (EulerOS-SA-2020-2123)
According to the version of the keepalived package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This...
cp when running with an option to preserve symlinks on multiple OSes allows local user-assisted attackers to overwrite arbitrary files via a symlink attack using crafted directories containing multiple source files that are copied to the same destination.
...
Design/Logic Flaw
Insecure permissions in Nakivo Backup & Replication Director version 9.4.0.r43656 on Linux allow local users to access the Nakivo Director web interface and gain root privileges. This occurs because the database containing the users of the web application and the password-recovery secret value is...
CVE-2020-15850
Nakivo Backup & Replication Director 9.4.0.r43656 on Linux exposes insecure permissions: the web app user database and password-recovery secret are readable, enabling local users to access the Nakivo Director web interface and gain root privileges. No remediation details are provided in the suppl...
CVE-2020-25826
PingID Integration for Windows Login before 2.4.2 allows local users to gain privileges by modifying CefSharp.BrowserSubprocess.exe...
Authorization Bypass
busybox is vulnerable to authorization bypass. The addprobe function in modutils/modprobe.c allows local users to bypass intended restrictions by loading kernel modules via a / character in the module name, as demonstrated by an ifconfig /usbserial up command or a mount -t /sndpcm none / command...
Privilege Escalation
policykit-1 is vulnerable to privilege escalation. An Integer overflow in the authenticationagentnewcookie function allows local users to gain higher privileges by creating a large number of connections that causes issuance of duplicated cookie values...
Denial Of Service (DoS)
policykit-1 is vulnerable to denial of service. A NULL pointer dereference in the authenticationagentnew function in polkitbackend/polkitbackendinteractiveauthority.c allows local users to cause crash the application with an invalid object path...
Information Disclosure
OpenSMTPD is vulnerable to information disclosure. An untrusted search path in makemap.c and race conditions in the offline functionality in smptd.c allows local users to read arbitrary files on the system...
CVE-2020-8028
A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local users to escalate to root on every system...
UBUNTU-CVE-2020-14304
A memory disclosure flaw was found in the Linux kernel's ethernet drivers, in the way it read data from the EEPROM of the device. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to confidentiality...