Vulnerability fixed in SonicWall SMA100

SonicWall has fixed a vulnerability in the SMA100. The vulnerability allows an authenticated remote malicious person potentially be able to use the management interface to execute arbitrary commands execute as "root" on the underlying system, or to cause a denial-of-service. SonicWall has release...

PT-2022-2637 · Vmware · Vmware Workspace One Identity Manager +1

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Access and Identity Manager affected versions not specified Description: The issue is related to a privilege escalation vulnerability. A malicious actor with local access can escalate privileges to 'root'. This...

Belkin N300 Firmware 操作系统命令注入漏洞

Belkin N300 Firmware is firmware for Belkin's Belkin N300 router. A security vulnerability exists in Belkin N300 Firmware version 1.00.08, which stems from multiple remote command injection vulnerabilities in the script /settinghidden.asp accessible both before and after configuring the device. A...

Input validation

Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to the root user. The vulnerability is...

UBUNTU-CVE-2022-1242

Apport can be tricked into connecting to arbitrary sockets as the root user...

Privilege escalation

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions...

CVE-2022-1116

Integer Overflow or Wraparound vulnerability in iouring of Linux Kernel allows local attacker to cause memory corruption and escalate privileges to root. This issue affects: Linux Kernel versions prior to 5.4.189; version 5.4.24 and later versions...

USN-5427-1 apport vulnerabilities

Muqing Liu and neoni discovered that Apport incorrectly handled detecting if an executable was replaced after a crash. A local attacker could possibly use this issue to execute arbitrary code as the root user. CVE-2021-3899 Gerrit Venema discovered that Apport incorrectly handled connections to...

CVE-2022-29332

D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's root folder for FTP access. This allows you to access the entire router file system via the FTP server...

CVE-2022-29332

D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's root folder for FTP access. This allows you to access the entire router file system via the FTP server...

GHSA-H24P-QWF4-84Q8 Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation

In Apache Hadoop 2.8.0, 3.0.0-alpha1, and 3.0.0-alpha2, the LinuxContainerExecutor runs docker commands as root with insufficient input validation. When the docker feature is enabled, authenticated users can run commands as root. This issue is fixed in versions 2.8.1 and 3.0.0-alpha3...

PT-2022-13742 · Canonical +1 · Apport +2

Name of the Vulnerable Software and Affected Versions: Apport affected versions not specified Description: The issue allows Apport to be tricked into connecting to arbitrary sockets as the root user. Recommendations: At the moment, there is no information about a newer version that contains a fix...

PT-2022-10829 · Linux Mint +1 · Linuxmint +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A race condition exists in the 'replaced executable' detection. This issue can be exploited, with the correct local configuration, to allow an attacker ...

Linux kernel 安全漏洞

Linux kernel is the kernel used by the Linux Foundation's open source operating system Linux. A security vulnerability exists in Linux kernel versions 4.14 through 5.18, which stems from an improperly updated reference count in net/sched. A local attacker can exploit the vulnerability to elevate...

Canonical Apport 竞争条件问题漏洞

Canonical Apport is a toolkit from Canonical UK that collects and feeds error messages information that the operating system considers useful when an application crashes. Canonical Apport suffers from a Competing Conditions Issue vulnerability that arises from Apport incorrectly detecting whether...

CVE-2022-0486

Improper file permissions in the CommandPost, Collector, Sensor, and Sandbox components of Fidelis Network and Deception enables an attacker with local, administrative access to the CLI to modify affected files and enable escalation of privileges equivalent to the root user. The vulnerability is...

CVE-2022-29587

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root aka superuser access privileges...

CVE-2022-29587

CVE-2022-29587 affects Konica Minolta bizhub MFP devices (pre-2022-04-14) where an internal Chromium browser runs with root privileges. The root/ sandbox-escape risk could allow elevated device access and plaintext password exposure (per CNNVD guidance). Documents consistently identify the compon...

CVE-2022-29587: Improper Privilege Management

Konica Minolta bizhub MFP devices before 2022-04-14 have an internal Chromium browser that executes with root aka superuser access privileges...

UBUNTU-CVE-2022-29581

Improper Update of Reference Count vulnerability in net/sched of Linux Kernel allows local attacker to cause privilege escalation to root. This issue affects: Linux Kernel versions prior to 5.18; version 4.14 and later versions...