Lucene search
+L

2485 matches found

Positive Technologies
Positive Technologies
•added 2021/06/11 12:00 a.m.•5 views

PT-2021-9127

Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description The issue is related to a permissions bypass in the kernel filesystem, specifically in /proc/net, which could lead to a local information leak. No additional execution privileges are needed for...

5.5CVSS0.00121EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/06/09 12:00 a.m.•28 views

SUSE: Security Advisory (SUSE-SU-2019:2787-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS6.9AI score0.04409EPSS
SaveExploits1References2
CNVD
CNVD
•added 2021/05/28 12:00 a.m.•80 views

Fedora has an unspecified vulnerability

Fedora is a set of Linux operating systems from the Fedora community. A security vulnerability exists in Fedora's Mounting /proc filesystem, which can be exploited by an attacker to bypass the chroot environment and gain write access to files...

5.5CVSS6.9AI score0.00306EPSS
SaveExploits1References1
OSV
OSV
•added 2021/05/27 7:15 p.m.•9 views

CVE-2020-10774

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rhfeatures file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to...

5.5CVSS6.7AI score0.00265EPSS
SaveExploits0References1
OSV
OSV
•added 2021/05/27 1:15 p.m.•13 views

DEBIAN-CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.5CVSS6.8AI score0.00306EPSS
SaveExploits1References1
NVD
NVD
•added 2021/05/27 1:15 p.m.•45 views

CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.5CVSS0.00306EPSS
SaveExploits1References1
OSV
OSV
•added 2021/05/27 1:15 p.m.•13 views

CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.5CVSS7AI score
SaveExploits0References3
Prion
Prion
•added 2021/05/27 1:15 p.m.•27 views

Command injection

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

2.1CVSS7.4AI score0.00306EPSS
SaveExploits1References1
Debian CVE
Debian CVE
•added 2021/05/27 12:28 p.m.•77 views

CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.5CVSS6.8AI score0.00306EPSS
SaveExploits1
Cvelist
Cvelist
•added 2021/05/27 12:28 p.m.•49 views

CVE-2008-2544

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.7AI score0.00306EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/27 12:00 a.m.•4 views

CVE-2008-2544: Exposure of Resource to Wrong Sphere

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise...

5.5CVSS5.8AI score0.00306EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2021/05/27 12:00 a.m.•16 views

PT-2025-48736

Name of the Vulnerable Software and Affected Versions SingularityCE versions prior to 4.3.5 SingularityPRO versions prior to 4.1.11 and 4.3.5 Description SingularityCE and SingularityPRO are open source container platforms. If a user depends on LSM restrictions to prevent harmful actions, an...

7.3CVSS7.7AI score0.0016EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/27 12:00 a.m.•6 views

CVE-2020-10774: Buffer Access with Incorrect Length Value

A memory disclosure flaw was found in the Linux kernel's versions before 4.18.0-193.el8 in the sysctl subsystem when reading the /proc/sys/kernel/rhfeatures file. This flaw allows a local user to read uninitialized values from the kernel memory. The highest threat from this vulnerability is to...

5.5CVSS5.7AI score0.00265EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/05/27 12:00 a.m.•5 views

PT-2021-8301

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned. Description The issue allows a user to bypass the chroot environment and gain write access to files by silently mounting the /proc filesystem in read-write mode via the chroot command. This could...

5.5CVSS0.00306EPSS
SaveExploits1References7
OSV
OSV
•added 2021/05/19 11:15 a.m.•15 views

CVE-2021-21732

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

7.5CVSS7.1AI score0.01003EPSS
SaveExploits0References1
NVD
NVD
•added 2021/05/19 11:15 a.m.•33 views

CVE-2021-21732

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

7.5CVSS0.01003EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2021/05/19 11:15 a.m.•11 views

CVE-2021-21732

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

7.5CVSS7.1AI score0.01003EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/05/19 10:48 a.m.•37 views

CVE-2021-21732

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

7.5AI score0.01003EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/05/19 12:00 a.m.•3 views

PT-2021-14743

Name of the Vulnerable Software and Affected Versions ZTE Axon 11 5G version CN P725A12/P725A12:10/QKQ1.200816.002/20201116.175317 Description The issue is related to improper access control, allowing third-party applications to read certain files in the proc file system without proper...

7.5CVSS0.01003EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/19 12:00 a.m.•6 views

CVE-2021-21732: Undefined Security Weakness

A mobile phone of ZTE is impacted by improper access control vulnerability. Due to improper permission settings, third-party applications can read some files in the proc file system without authorization. Attackers could exploit this vulnerability to obtain sensitive information. This affects Axo...

7.5CVSS5.8AI score0.01003EPSS
SaveExploits0References1
Rows per page
Query Builder