CVE-2021-25314

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate to root. This issue affects: SUSE Linu...

CVE-2021-25314 hawk: Insecure file permissions

A Creation of Temporary File With Insecure Permissions vulnerability in hawk2 of SUSE Linux Enterprise High Availability 12-SP3, SUSE Linux Enterprise High Availability 12-SP5, SUSE Linux Enterprise High Availability 15-SP2 allows local attackers to escalate to root. This issue affects: SUSE Linu...

CVE-2021-20020

A command execution vulnerability in SonicWall GMS 9.3 allows a remote unauthenticated attacker to locally escalate privilege to root...

CVE-2021-30462

VestaCP through 0.9.8-24 allows the admin user to escalate privileges to root because the Sudo configuration does not require a password to run /usr/local/vesta/bin scripts...

CVE-2020-8032

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions...

CVE-2020-8032

CVE-2020-8032 describes an insecure temporary file handling vulnerability in openSUSE Factory’s cyrus-sasl packaging that enables local privilege escalation to root. Affected: openSUSE Factory cyrus-sasl 2.1.27-4.2 and earlier. Multiple connected sources indicate patches/versions addressing the i...

CVE-2020-8032 Local privilege escalation to root due to insecure tmp file usage

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root. This issue affects: openSUSE Factory cyrus-sasl version 2.1.27-4.2 and prior versions...

openSUSE 安全漏洞

openSUSE is a set of Linux-based free operating system and open source community project of the German SUSE company. A security vulnerability exists in openSUSE Factory 2.1.27-4.2 and prior versions, which stems from an insecure temporary file vulnerability that can be exploited by an attacker to...

Insecure Temporary File

A Insecure Temporary File vulnerability in the packaging of cyrus-sasl of openSUSE Factory allows local attackers to escalate to root...

PT-2021-3364 · Opensuse · Opensuse Leap

Name of the Vulnerable Software and Affected Versions: python-HyperKitty versions prior to 1.3.4-5.1 openSUSE Leap 15.2 python-HyperKitty version 1.3.2-lp152.2.3.1 and prior versions Description: The issue is related to a UNIX Symbolic Link Symlink Following vulnerability in python-HyperKitty,...

The vulnerability of the command-line interface of Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 8000 Series allows a attacker to elevate their privileges to the root level.

The vulnerability of the command-line interface of Cisco IOS XR routers from the Network Convergence System 540 Series and Cisco 8000 Series exists due to the lack of measures taken to neutralize the special elements used in the operating system’s command. Exploiting this vulnerability can allow...

Druva inSync Client Security Vulnerability

Druva inSync Client is a lightweight application from Druva USA that supports managing data backups and allows collaboration with other users. A security vulnerability exists in the inSync Client installer, which stems from incorrect integrity checking and directory permissions, and which the...

The vulnerability of the SAP Landscape Management automation system and the installation of SAP Adaptive Extensions, due to deficiencies in access control, allows attackers to elevate their privileges to the root level.

The vulnerability of the SAP Landscape Management automation system and the installation of SAP Adaptive Extensions is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level...

CVE-2020-8781

Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process...

Code injection

Lack of input sanitization in UpdateRebootMgr service of ALEOS 4.11 and later allow an escalation to root from a low-privilege process...

The vulnerability of JunOS’s EX Series and QFX Series routers allows attackers to elevate their privileges to the root level.

The vulnerability of JunOS’s EX Series and QFX Series routers lies in their authentication deficiencies. Exploiting this vulnerability can allow attackers to gain privileges to the root level...

CVE-2020-8028

A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local users to escalate to root on every system...

CVE-2020-8028

A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local users to escalate to root on every system...

Improper access control

A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local users to escalate to root on every system...

CVE-2020-8028 salt-api is accessible to every user on SUSE Manager Server

A Improper Access Control vulnerability in the configuration of salt of SUSE Linux Enterprise Module for SUSE Manager Server 4.1, SUSE Manager Proxy 4.0, SUSE Manager Retail Branch Server 4.0, SUSE Manager Server 3.2, SUSE Manager Server 4.0 allows local users to escalate to root on every system...