1764 matches found
PT-2024-36621 · Dtex · Dtex Dec-M
Name of the Vulnerable Software and Affected Versions: DTEX DEC-M DTEX Forwarder version 6.1.1 Description: An issue was discovered in the com.dtexsystems.helper service, which handles privileged operations within the macOS DTEX Event Forwarder agent. The service fails to implement critical clien...
CVE-2020-12487: Improper Input Validation
Due to the flaws in the verification of input parameters, the attacker can input carefully constructed commands to make the ABE service execute some commands with root privilege...
PT-2024-22290
Name of the Vulnerable Software and Affected Versions Scanner device affected versions not specified Description The scanner device boots into a kiosk mode by default and opens the Scan2Net interface in a browser window. This browser is run with the permissions of the root user. There are also...
PT-2024-10302
Name of the Vulnerable Software and Affected Versions SHARP routers affected versions not specified Description The issue is related to a hidden debug function that is enabled in multiple SHARP routers, allowing an arbitrary OS command to be executed with root privilege by a remote unauthenticate...
CVE-2024-10074: Use After Free
in OpenHarmony v4.1.1 and prior versions allow a local attacker cause the common permission is upgraded to root through use after free...
The vulnerability of the application software interface of the Cisco Unified Computing System’s servers—Cisco UCS B-Series, Managed C-Series, and X-Series—is related to the failure to implement measures to neutralize specific elements. This allows attackers to execute arbitrary code and elevate their privileges to the root level.
The vulnerability of the application software interface of the Cisco Unified Computing System’s servers—Cisco UCS B-Series, Managed C-Series, and X-Series—is related to the lack of measures taken to neutralize specific elements. Exploiting this vulnerability allows a malicious actor to execute...
DEBIAN-CVE-2024-52336
A script injection vulnerability was identified in the Tuned package. The instancecreate D-Bus function can be called by locally logged-in users without authentication. This flaw allows a local non-privileged user to execute a D-Bus call with scriptpre or scriptpost options that permit arbitrary...
DEBIAN-CVE-2023-1521
On Linux the sccache client can execute arbitrary code with the privileges of a local sccache server, by preloading the code in a shared library passed to LDPRELOAD. If the server is run as root which is the default when installing the snap package https://snapcraft.io/sccache , this means a user...
CVE-2024-50370
CVE-2024-50370 affects Advantech EKI-6333AC-2G (<=1.6.3), EKI-6333AC-2GD (<=1.6.3) and EKI-6333AC-1GPO (1.6.3; 1GPO: >1.2.1) and/or temporarily disable the edgserver service and restrict access to the cfg_cmd_set_eth_conf operation until patches are applied.
CVE-2024-38830: Improper Privilege Management
VMware Aria Operations contains a local privilege escalation vulnerability. A malicious actor with local administrative privileges may trigger this vulnerability to escalate privileges to root user on the appliance running VMware Aria Operations...
Uaudio com.uaudio.bsd.helper 安全漏洞
Uaudio com.uaudio.bsd.helper is an application from Uaudio, Inc. A security vulnerability exists in Uaudio com.uaudio.bsd.helper, which stems from the failure to implement critical client authentication in XPC inter-process communication, allowing an unauthorized client to leverage the service's...
CVE-2024-8807
CVE-2024-8807 : Cohesive Networks VNS3 has a command injection vulnerability in its web service (listening on port 8000 by default). The flaw stems from insufficient validation of a user-supplied string before it is used to execute a system call, allowing an attacker to run code with root privile...
CVE-2024-8809: Improper Neutralization of Special Elements used in an OS Command
Cohesive Networks VNS3 Command Injection Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of Cohesive Networks VNS3. Authentication is required to exploit this vulnerability. The specific flaw exists within the web...
The vulnerability of the corporate version of the GitHub Enterprise Server, related to the incorrect handling of symbolic links before accessing files, allows a violator to elevate their privileges to the root level.
The vulnerability of the corporate version of the GitHub Enterprise Server is related to the incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...
CVE-2022-20871: Improper Neutralization of Special Elements used in an OS Command
A vulnerability in the web management interface of Cisco AsyncOS for Cisco Secure Web Appliance, formerly Cisco Web Security Appliance WSA, could allow an authenticated, remote attacker to perform a command injection and elevate privileges to root. This vulnerability is due to insufficient...
xorg-x11-server: tigervnc: heap-based buffer overflow privilege escalation vulnerability
A flaw was found in the X.org server. Due to improperly tracked allocation size in XkbSetCompatMap, a local attacker may be able to trigger a buffer overflow condition via a specially crafted payload, leading to denial of service or local privilege escalation in distributions where the X.org serv...
CVE-2024-51721
CVE-2024-51721 : A code injection vulnerability affects the SecuSUITE Server Web Administration Portal in SecuSUITE versions up to 5.0.420. The issue allows an attacker to inject script commands or other executable content that would run with root privileges. Affected component is the Web Adminis...
CVE-2024-51721 Vulnerabilities in SecuSUITE Server Components Impact SecuSUITE
A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege...
PT-2024-34868
Name of the Vulnerable Software and Affected Versions SecuSUITE versions 5.0.420 and earlier Description A code injection issue in the SecuSUITE Server Web Administration Portal could allow an attacker to inject script commands or other executable content into the server, potentially running with...
CVE-2024-51721: Improper Link Resolution Before File Access
A code injection vulnerability in the SecuSUITE Server Web Administration Portal of SecuSUITE versions 5.0.420 and earlier could allow an attacker to potentially inject script commands or other executable content into the server that would run with root privilege...