14601 matches found
CVE-2020-13551
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege...
CVE-2020-13551
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege...
Privilege escalation
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege...
CVE-2020-13551
Advantech WebAccess/SCADA 9.0.1 is affected by CVE-2020-13551, a local privilege escalation via the PostgreSQL executable. The vulnerability arises from weak file system permissions that allow an authenticated user to replace binaries or loaded DLLs in the installation directory (e.g., pg_ctl.exe...
CVE-2020-13551
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via PostgreSQL executable, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege...
[SECURITY] Fedora 33 Update: roundcubemail-1.4.11-1.fc33
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
[SECURITY] Fedora 32 Update: roundcubemail-1.4.11-1.fc32
RoundCube Webmail is a browser-based multilingual IMAP client with an application-like user interface. It provides full functionality you expect from an e-mail client, including MIME support, address book, folder manipulation, message searching and spell checking. RoundCube Webmail is written in...
OPENSUSE-SU-2021:0300-1 Security update for mumble
This update for mumble fixes the following issues: mumble was updated to 1.3.4: Fix use of outdated non-existent notification icon names Fix Security vulnerability caused by allowing non http/https URL schemes in public server list boo1182123 Server: Fix Exit status for actions like --version or...
Advantech WebAccess/SCADA installation local file inclusion
Summary A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A specially crafted application can lead to information disclosure. An attacker can send an authenticated HTTP request to trigger this vulnerability. Tested Versions Advantech...
Advantech WebAccess/SCADA installation privilege escalation vulnerability
Summary Multiple exploitable local privilege elevation vulnerabilities exist in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. Depending on the vector chosen, an attacker can either replace binary or loaded modules to execute code with NT SYSTEM privilege. Tested...
The vulnerability of the PostgreSQL database management system, related to security mechanism errors, allows a perpetrator to obtain column values from error messages (without the privilege for SELECT).
The vulnerability of the PostgreSQL database management system is related to errors in security mechanisms. Exploiting this vulnerability allows a malicious actor to obtain column values from error messages without the privilege to perform a SELECT statement...
Ubuntu: Security Advisory (USN-4735-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for mumble (moderate)
openSUSE Security Update: Security update for mumble Announcement ID: openSUSE-SU-2021:0300-1 Rating: moderate References: 1180068 1182123 Affected Products: openSUSE Leap 15.2 An update that contains security fixes can now be installed. Description: This update for mumble fixes the following...
USN-4735-1 postgresql-12 vulnerability
Heikki Linnakangas discovered that PostgreSQL incorrectly leaked values of denied columns when handling certain errors. A remote attacker could possibly use this issue to obtain sensitive information...
USN-4735-1: PostgreSQL vulnerability
Heikki Linnakangas discovered that PostgreSQL incorrectly leaked values of denied columns when handling certain errors. A remote attacker could possibly use this issue to obtain sensitive information...
Regular Expression Denial Of Service (REDoS)
The PostgreSQL adapter in Active Record is vulnerable to regular expression denial of service ReDoS. An attacker can send a carefully crafted input to cause the input validation in the money type of the PostgreSQL adapter in Active Record to spend too much time in a regular expression, resulting ...
Ubuntu 20.04 LTS : PostgreSQL vulnerability (USN-4735-1)
The remote Ubuntu 20.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-4735-1 advisory. Heikki Linnakangas discovered that PostgreSQL incorrectly leaked values of denied columns when handling certain errors. A remote attacker could possibly use this...
Virtuozzo Hybrid Infrastructure 4.5 (4.5.0-284)
In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance the end-user experience and service providers' interoperability. The improvements cover compute services, networking, storage core, monitoring, and the administrative user interface. Additionally,...