3826 matches found
PT-2021-7294
Name of the Vulnerable Software and Affected Versions Advantech WISE-PaaS/OTA Server version 3.0.9 Description A privilege escalation issue exists due to improper default permission settings, allowing an attacker to elevate privileges to NT SYSTEM authority by replacing a specially-crafted file i...
CVE-2021-22038
On Windows, the uninstaller binary copies itself to a fixed temporary location, which is then executed the originally called uninstaller exits, so it does not block the installation directory. This temporary location is not randomized and does not restrict access to Administrators only so a...
InstallBuilder安全特征问题漏洞
Vmware InstallBuilder is a multi-platform installer development and automatic update tool from Vmware, Inc. A security vulnerability exists in InstallBuilder that stems from the fact that under certain circumstances on the InstallBuilder Windows version, the uninstaller binary copies itself to a...
CVE-2021-23877
Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...
CVE-2021-37363
An Insecure Permissions issue exists in Gestionale Open 11.00.00. A low privilege account is able to rename the mysqld.exe file located in bin folder and replace with a malicious file that would connect back to an attacking computer giving system level privileges nt authority\system due to the...
PT-2021-7267
Name of the Vulnerable Software and Affected Versions Advantech SQ Manager Server version 1.0.6 Description A privilege escalation issue exists due to incorrect default permission settings, allowing an attacker to elevate privileges to NT SYSTEM authority by replacing a specially-crafted file in...
CVE-2021-38485
The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk...
CVE-2021-38485 Emerson WirelessHART Gateway
The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk...
CVE-2021-38485
The CVE-2021-38485 entry corresponds to Emerson WirelessHART Gateway. The issue is improper input validation in the restore file, allowing a malicious configuration file to replace arbitrary files on disk. Connected sources specify affected products and versions (e.g., WirelessHART 1410/1410D/142...
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random number generator but this is not done correctly. Remote code execution might be a slight possibility.
...
PT-2021-22159
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue concerns improper input validation in the restore file, allowing an attacker to provide malicious config files that can replace any file on disk...
Debian DLA-2788-1 : strongswan - LTS security update
The remote Debian 9 host has packages installed that are affected by a vulnerability as referenced in the dla-2788 advisory. Researchers at the United States of America National Security Agency NSA identified a denial of services vulnerability in strongSwan, an IKE/IPsec suite. Once the in-memory...
SUSE: Security Advisory (SUSE-SU-2021:3469-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
USN-5111-2 strongswan vulnerability
USN-5111-1 fixed a vulnerability in strongSwan. This update provides the corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM. Original advisory details: It was discovered that strongSwan incorrectly handled replacing certificates in the cache. A remote attacker could use this issue to...
CVE-2021-41991
The in-memory certificate cache in strongSwan before 5.9.4 has a remote integer overflow upon receiving many requests with different certificates to fill the cache and later trigger the replacement of cache entries. The code attempts to select a less-often-used cache entry by means of a random...
httpd security update
2.4.6-97.0.1.1 - replace index.html with Oracle's index page oracleindex.html 2.4.6-97.1 - Resolves: 2011729 - CVE-2021-40438 httpd: modproxy: SSRF via a crafted request uri-path containing 'unix:'...
Description of the security update for SharePoint Enterprise Server 2013: October 12, 2021 (KB4493202)
None None...
Description of the security update for Office Web Apps Server 2013: October 12, 2021 (KB5002036)
None None...
CVE-2021-20375: Undefined Security Weakness
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567...
CVE-2021-20375
IBM Sterling File Gateway 2.2.0.0 through 6.1.1.0 could allow an authenticated user to intercept and replace a message sent by another user due to improper access controls. IBM X-Force ID: 195567...