3618 matches found
Amazon Linux 2 : libguestfs-winsupport (ALAS-2020-1522)
The version of libguestfs-winsupport installed on the remote host is prior to 7.2-3. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2020-1522 advisory. An integer underflow issue exists in ntfs-3g 2017.3.23. A local attacker could potentially exploit this by running...
Security fix for the ALT Linux 9 package ntfs-3g version 2:2017.3.23-alt3
Oct. 23, 2020 Valery Inozemtsev 2:2017.3.23-alt3 - add upstream fix for CVE-2019-9755...
Acronis: Local Privilege Escalation when deleting a file from Quarantine
Vulnerability description not provided...
CVE-2020-0838
An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially...
CVE-2020-0838
An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially...
Privilege escalation
An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially...
CVE-2020-0838 NTFS Elevation of Privilege Vulnerability
...
CVE-2020-0838
CVE-2020-0838 describes an elevation-of-privilege vulnerability in Windows NTFS where access checks are insufficiently performed. An attacker who can log on locally and run a specially crafted application could execute code in an elevated context, potentially gaining full control of the affected ...
CVE-2020-0838 NTFS Elevation of Privilege Vulnerability
...
Microsoft Windows/Windows Server Elevation of Privilege Vulnerability (CNVD-2021-68743)
Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation, an operating system for personal devices, and Microsoft Windows Server, a server operating system. An elevation of privilege vulnerability exists in Microsoft Windows/Windows Server. The vulnerability stems...
NTFS Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when NTFS improperly checks access. An attacker who successfully exploited this vulnerability could run processes in an elevated context. To exploit the vulnerability, an attacker would first have to log on to the system, and then run a specially...
KLA11952 Multiple vulnerabilities in Microsoft ESU products
Multiple vulnerabilities were found in Microsoft ESU products. Malicious users can exploit these vulnerabilities to gain privileges, obtain sensitive information, cause denial of service, execute arbitrary code. Below is a complete list of vulnerabilities: 1. An elevation of privilege vulnerabili...
KLA11951 Multiple vulnerabilities in Microsoft Windows
Multiple vulnerabilities were found in Microsoft Windows. Malicious users can exploit these vulnerabilities to gain privileges, execute arbitrary code, obtain sensitive information, cause denial of service, spoof user interface, bypass security restrictions. Below is a complete list of...
Design/Logic Flaw
SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as...
CVE-2020-24955
SUPERAntiSyware Professional X Trial 10.0.1206 is vulnerable to local privilege escalation because it allows unprivileged users to restore a malicious DLL from quarantine into the system32 folder via an NTFS directory junction, as demonstrated by a crafted ualapi.dll file that is detected as...
CVE-2020-24955
CVE-2020-24955 affects SUPERAntiSpyware Professional X Trial
Huawei EulerOS: Security Advisory for libgit2 (EulerOS-SA-2020-1861)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
EulerOS 2.0 SP8 : libgit2 (EulerOS-SA-2020-1861)
According to the versions of the libgit2 package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in libgit2 before 0.28.4 and 0.9x before 0.99.0. path.c mishandles equivalent filenames that exist because of NTFS...
sleuthkit:sleuthkit_fls_ntfs_fuzzer: Heap-buffer-overflow in ntfs_dinode_lookup
Detailed Report: https://oss-fuzz.com/testcase?key=6289649593745408 Project: sleuthkit Fuzzing Engine: libFuzzer Fuzz Target: sleuthkitflsntfsfuzzer Job Type: libfuzzerasansleuthkit Platform Id: linux Crash Type: Heap-buffer-overflow READ 1 Crash Address: 0x615000000a00 Crash State:...
