CVE-2022-21658 Race condition in std::fs::remove_dir_all in rustlang

Rust is a multi-paradigm, general-purpose programming language designed for performance and safety, especially safe concurrency. The Rust Security Response WG was notified that the std::fs::removedirall standard library function is vulnerable a race condition enabling symlink following CWE-363. A...

CVE-2022-21284

Vulnerability in the MySQL Cluster product of Oracle MySQL component: Cluster: General. Supported versions that are affected are 7.4.34 and prior, 7.5.24 and prior, 7.6.20 and prior and 8.0.27 and prior. Difficult to exploit vulnerability allows high privileged attacker with access to the physica...

PT-2022-1994 · Mysql Server +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 8.0.27 and prior Description: The issue exists due to insufficient input validation in the MySQL Cluster component. Exploitation of this issue can allow a remote attacker to gain privileged access. The vulnerability is...

PT-2022-2016 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.4.34 and prior MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue exists due to insufficient input validation in the MySQL...

PT-2022-2020 · Mysql Server +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 8.0.27 and prior Description: The issue exists due to insufficient input validation in the MySQL Cluster component. It may allow a remote attacker to gain privileged access. The exploitation is difficult and requires...

PT-2022-2000 · Oracle +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 7.5.24 and prior MySQL Cluster versions 7.6.20 and prior MySQL Cluster versions 8.0.27 and prior Description: The issue exists due to insufficient input validation in the MySQL Cluster component. Exploitation of this...

PT-2022-2003 · Mysql Server +1 · Mysql Cluster +1

Name of the Vulnerable Software and Affected Versions: MySQL Cluster versions 8.0.27 and prior Description: The issue exists due to insufficient input validation in the MySQL Cluster component. Exploitation of this issue may allow a remote attacker to gain privileged access. The vulnerability is...

CVE-2021-44840

An issue was discovered in Delta RM 1.2. Using an privileged account, it is possible to edit, create, and delete risk labels, such as Criticality and Priority Indication labels. By using the /core/table/query endpoint, and by using a POST request and indicating the affected label with tableUid...

CVE-2022-0215 XootiX Plugins <= Various Versions Cross-Site Request Forgery to Arbitrary Options Update

The Login/Signup Popup, Waitlist Woocommerce Back in stock notifier , and Side Cart Woocommerce Ajax WordPress plugins by XootiX are vulnerable to Cross-Site Request Forgery via the savesettings function found in the /includes/xoo-framework/admin/class-xoo-admin-settings.php file which makes it...

CVE-2021-35500

The Data Virtualization Server component of TIBCO Software Inc.'s TIBCO Data Virtualization, TIBCO Data Virtualization, TIBCO Data Virtualization, and TIBCO Data Virtualization for AWS Marketplace contains a difficult to exploit vulnerability that allows a low privileged attacker with local acces...

The vulnerability in the ChromeOS Networking component of the Google Chrome browser allows a hacker to gain privileged access to the infrastructure through a created ONC file.

The vulnerability of the ChromeOS Networking component of the Google Chrome browser is related to implementation errors in security checks for standard elements. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain privileged access to infrastructure through a...

CVE-2021-4178

A arbitrary code execution flaw was found in the Fabric 8 Kubernetes client affecting versions 5.0.0-beta-1 and above. Due to an improperly configured YAML parsing, this will allow a local and privileged attacker to supply malicious YAML...

PT-2021-21220 · Dell Emc · Dell Emc Avamar

Name of the Vulnerable Software and Affected Versions: Dell EMC Avamar versions 18.2, 19.1, 19.2, 19.3, 19.4 Description: The issue is related to plain-text password storage. A high privileged user could potentially exploit this, leading to a complete outage. Recommendations: For versions 18.2,...

CVE-2021-38900

IBM Business Process Manager 8.5 and 8.6 and IBM Business Automation Workflow 18.0, 19.0, 20.0 and 21.0 could allow a privileged user to obtain highly sensitive information due to improper access controls. IBM X-Force ID: 209607...

PT-2021-22983 · Tcman Gim · Tcman Gim

Name of the Vulnerable Software and Affected Versions: TCMAN GIM affected versions not specified Description: The issue is related to the lack of authorization checks when accessing certain resources. A remote attacker could exploit this to access URLs that require privileges without having them,...

CVE-2021-42835

An issue was discovered in Plex Media Server through 1.24.4.5081-e362dc1ee. An attacker with a foothold in a endpoint via a low-privileged user account can access the exposed RPC service of the update service component. This RPC functionality allows the attacker to interact with the RPC...

CVE-2021-31822

When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access...

CVE-2021-31822

When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access...

CVE-2021-31822

When Octopus Tentacle is installed on a Linux operating system, the systemd service file permissions are misconfigured. This could lead to a local unprivileged user modifying the contents of the systemd service file to gain privileged access...

CVE-2021-31822

CVE-2021-31822 affects Octopus Tentacle on Linux where the systemd service file permissions are misconfigured. The underlying issue allows a local unprivileged user to modify the systemd service file, enabling privilege escalation. Public references (NVD, Red Hat, OSV, CNNVD, etc.) describe this ...