Cisco多款产品安全漏洞

Cisco Unity Connection UC and others are products of Cisco Corporation.Cisco Unity Connection is a voice messaging platform.Cisco Unified Communications Manager CUCM, Unified CM. Cisco Unified Communications Manager CUCM, Unified CM, CallManager is a call processing component of a unified...

D-Link DAP-2622 DDP Set IPv6 Address Primary DNS Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DAP-2622 routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the DDP service. The issue results from the lack of proper validation ...

CVE-2023-4341

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI...

CVE-2023-4341 Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI

Broadcom RAID Controller is vulnerable to Privilege escalation to root due to creation of insecure folders by Web GUI...

The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura allows attackers to elevate their privileges to the root level.

The vulnerability of the libxpc library in iOS, iPadOS, macOS Big Sur, macOS Monterey, watchOS, and macOS Ventura systems is related to the use of an insecure search path. Exploiting this vulnerability allows an attacker to elevate their privileges to the root level...

The vulnerability of Cisco BroadWorks server software arises from the lack of measures taken to neutralize specific elements, allowing attackers to elevate their privileges to the root level.

The vulnerability of Cisco BroadWorks server software exists due to the lack of measures taken to neutralize special elements used in the operating system command. Exploiting this vulnerability can allow attackers to elevate their privileges to the root level...

The vulnerability of Cisco BroadWorks server software, related to deficiencies in access control, allows a perpetrator to elevate their privileges to the root level.

The vulnerability of Cisco BroadWorks server software is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level by verifying their identity as a user with the role of BWORKS or BWSUPERADMIN...

CVE-2023-38496

Apptainer is an open source container platform. Version 1.2.0-rc.2 introduced an ineffective privilege drop when requesting container network setup, therefore subsequent functions are called with root privileges, the attack surface is rather limited for users but an attacker could possibly craft ...

PT-2023-8342 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.5 Description: The issue is related to a lack of access control in the macOS operating system, specifically in the crontabs task scheduler. This could allow an attacker to gain root privileges. The estimated number ...

CVE-2023-3467

Privilege Escalation to root administrator nsroot...

Citrix ADC 和 Citrix Gateway 安全漏洞

Citrix Systems Citrix Gateway Citrix Systems NetScaler Gateway and Citrix ADC are both products of Citrix Systems, Inc.Citrix Gateway is a secure remote access solution. The product provides administrators with application-level and data-level controls to enable users to remotely access...

UBUNTU-CVE-2023-3269

A vulnerability exists in the memory management subsystem of the Linux kernel. The lock handling for accessing and updating virtual memory areas VMAs is incorrect, leading to use-after-free problems. This issue can be successfully exploited to execute arbitrary kernel code, escalate containers, a...

ARM Mali GPU Kernel Driver < r30p0 / < r31p0 Use After Free (CVE-2021-29256)

The version of the Mali GPU Kernel Driver installed on the remote system is prior to r30p0 running on Bifrost or Valhall architecture or prior to r31p0 running on Midgard architecture. It is, therefore affected by a use-after-free error. A non-privileged user can make improper operations on GPU...

CVE-2023-33553

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

CVE-2023-33553

An issue in Planet Technologies WDRT-1800AX v1.01-CP21 allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie...

PT-2023-24381 · Planet Technologies · Wdrt-1800Ax

Name of the Vulnerable Software and Affected Versions: Planet Technologies WDRT-1800AX version v1.01-CP21 Description: The issue allows attackers to bypass authentication and escalate privileges to root via manipulation of the LoginStatus cookie. Recommendations: For Planet Technologies WDRT-1800...

Quick Heal 安全漏洞

Quick Heal is an antivirus software from Quick Heal that provides IT security solutions for your PC, Mac, phone, tablet and corporate network. A security vulnerability exists in Quick Heal Technologies Limited Seqrite Endpoint Security EPS versions prior to v8.0 that stems from incorrect access...

PT-2023-23363 · Seqrite · Seqrite Endpoint Security

Name of the Vulnerable Software and Affected Versions: Seqrite Endpoint Security EPS versions prior to 8.0 Description: The issue is related to incorrect access control, allowing attackers to escalate privileges to root by supplying a crafted binary to the target system. Recommendations: For...

PT-2023-2995 · Vmware · Vmware Aria Operations

Name of the Vulnerable Software and Affected Versions: VMware Aria Operations affected versions not specified Description: The issue is related to insufficient access control in the VMware Aria Operations tool, which can be exploited to execute arbitrary code and escalate privileges. A malicious...

FiiO M6 安全漏洞

FiiO M6 is an audio player from the Chinese company FiiO. A security vulnerability exists in FiiO M6 v1.0.4, which originates from a buffer overflow. The vulnerability can be exploited by an attacker to elevate privileges to root...