1764 matches found
Debian: Security Advisory (DLA-2534-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DSA 4839-1] sudo security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4839-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 26, 2021 https://www.debian.org/security/faq -...
CVE-2021-0218 Junos OS: Command injection vulnerability in license-check daemon
A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges to execute commands with root privilege. license-check is a daemon used to manage licenses in Junos OS. To update licenses, a user execute...
CVE-2021-0219: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability in install package validation subsystem of Juniper Networks Junos OS that may allow a locally authenticated attacker with privileges to execute commands with root privilege. To validate a package in Junos before installation, an administrator executes the command...
CVE-2021-0218: Improper Neutralization of Special Elements used in an OS Command
A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges to execute commands with root privilege. license-check is a daemon used to manage licenses in Junos OS. To update licenses, a user execute...
CVE-2021-1192
Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...
CVE-2020-14102: Improper Neutralization of Special Elements used in a Command
There is command injection when ddns processes the hostname, which causes the administrator user to obtain the root privilege of the router. This affects Xiaomi router AX1800rom version 1.0.336 and Xiaomi route RM1800 root version 1.0.26...
PT-2021-2120
Name of the Vulnerable Software and Affected Versions Juniper Networks Junos OS versions prior to 17.3R3-S10 Juniper Networks Junos OS version 17.4 prior to 17.4R2-S12, 17.4R3-S3 Juniper Networks Junos OS version 18.1 prior to 18.1R3-S11 Juniper Networks Junos OS version 18.2 prior to 18.2R2-S8,...
PT-2021-9691
Name of the Vulnerable Software and Affected Versions Xiaomi router AX1800rom versions prior to 1.0.336 Xiaomi router RM1800 root versions prior to 1.0.26 Description The issue is related to command injection when processing the hostname, allowing an administrator user to gain root privilege of t...
Exploit for Race Condition in Canonical Ubuntu_Linux
PoC exploit for CVE-2016-5195 Dirty COW. The target product/service is Linux, specifically the vDSO Virtual Dynamic Shared Object component. The vulnerability class/vector is a privilege escalation vulnerability, allowing an unprivileged user to gain root privileges. The probable entry point is t...
PT-2020-17092
Name of the Vulnerable Software and Affected Versions Fujitsu Eternus Storage DX200 S4 devices through 2020-11-25 Description An issue was discovered that allows the portal to be accessed with root privileges when a specific URI is visited from a different web browser after logging in as a root...
Nagios XI Improper Privilege Retention Vulnerability
Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. Nagios XI 5.7.4 suffers from a Permission Improperly Retained vulnerability. A local user with low privileges can exploit this...
GLSA-202011-11 : Blueman: Local privilege escalation
The remote host is affected by the vulnerability described in GLSA-202011-11 Blueman: Local privilege escalation Where Polkit is not used and the default permissions have been changed on a specific rule file, control of a local DHCP daemon may be possible. Impact : A local attacker may be able to...
The vulnerability of Cisco Firepower Threat Defense’s micro-programming software relates to errors in container operations, allowing attackers to execute commands with root privileges.
The vulnerability of Cisco Firepower Threat Defense’s microprogramming software is related to errors during the operation of containers. Exploiting this vulnerability allows an attacker to execute commands with root privileges by modifying a specific configuration file within the container’s basi...
PT-2020-16683
Name of the Vulnerable Software and Affected Versions HK1 Box S905X3 TV Box affected versions not specified Description The issue allows a local unprivileged user to escalate to root using the /system/xbin/su binary. This can be achieved via a serial port UART connection or using adb...
KPMCore: Root privilege escalation
Background KPMcore, the KDE Partition Manager core, is a library for examining and modifying partitions, disk devices, and filesystems on a Linux system. It provides a unified programming interface over top of external system-manipulation tools. Description Improper checks on the D-Bus request...
GLSA-202011-03 : KPMCore: Root privilege escalation
The remote host is affected by the vulnerability described in GLSA-202011-03 KPMCore: Root privilege escalation Improper checks on the D-Bus request received resulted in improper protection for /etc/fstab. Impact : An attacker could esclate privileges to root by exploiting this vulnerability...
CVE-2020-16262
Winston 1.5.4 devices have a local www-data user that is overly permissioned, resulting in root privilege escalation...
