SUSE CVE-2020-28011

Exim 4 before 4.94.2 allows Heap-based Buffer Overflow in queuerun via two sender options: -R and -S. This may cause privilege escalation from exim to root...

CVE-2022-31808

A vulnerability has been identified in SiPass integrated AC5102 ACC-G2 All versions V2.85.44, SiPass integrated ACC-AP All versions V2.85.43. Affected devices improperly sanitize user input on the telnet command line interface. This could allow an authenticated user to escalate privileges by...

Siemens SiPass Integrated 输入验证错误漏洞

ACC-AP Advanced Central Controller is a door controller for up to two Internet/Intranet-connected doors used to communicate with the SiPass integrated access control system. AC5102 / ACC-G2 Advanced Central Controller is the central controller for the SiPass integrated The central controller for...

Cisco Identity Services Engine 操作系统命令注入漏洞

Cisco Identity Services Engine ISE is an environment-aware platform ISE Identity Services Engine from Cisco. The ISE collects real-time information about the network, users, and devices to formulate and enforce policies to regulate the network. A security vulnerability exists in Cisco Identity...

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system allows a hacker to elevate their privileges to the root level.

The vulnerability of the Common Desktop Environment component of the Oracle Solaris operating system arises due to an overflow in the buffer on the stack. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level by using a malicious printer...

CVE-2022-48108

D-Link DIR878FW1.30B08 was discovered to contain a command injection vulnerability via the component /SetNetworkSettings/SubnetMask. This vulnerability allows attackers to escalate privileges to root via a crafted payload...

CVE-2018-25078

man-db before 2.8.5 on Gentoo allows local users with access to the man user account to gain root privileges because /usr/bin/mandb is executed by root but not owned by root. Also, the owner can strip the setuid and setgid bits...

The vulnerability of the NETCONF protocol implementation in the Cisco Network Services Orchestrato (NSO) software solution allows a hacker to elevate their privileges to the root level in the system and cause service failures.

The vulnerability of the NETCONF protocol implementation in the Cisco Network Services Orchestrator NSO software lies in incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to elevate their privileges to the root...

Common Desktop Environment 缓冲区错误漏洞

Common Desktop Environment is a Unix and OpenVMS desktop environment for individual developers based on the Motif widget toolkit. A security vulnerability exists in Common Desktop Environment version 1.6. An attacker can exploit the vulnerability to escalate to root privileges...

The vulnerability of FortiWLC wireless access controller software, related to deficiencies in access control, allows attackers to execute arbitrary commands and increase their privileges.

The vulnerability of the microprogrammed software of FortiWLC wireless access controllers is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely and elevate their privileges to the root level, bypassing the...

Zoom Rooms 安全漏洞

Zoom Rooms is a software-based conferencing system from Zoom USA. A system that allows web conferencing on fixed endpoints, similar to traditional videoconferencing systems. A security vulnerability exists in Zoom Rooms for macOS clients versions prior to 5.11.3. An attacker can exploit the...

Security Bulletin: AIX is affected by a root privilege escalation vulnerability (CVE-2022-41290)

Summary A vulnerability in the AIX rmmlcachefile user command could allow a non-privileged local user to obtain root privileges CVE-2022-41290. Vulnerability Details CVEID:CVE-2022-41290 DESCRIPTION: IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a...

CVE-2022-46334

Proofpoint Enterprise Protection PPS/PoD contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below...

Proofpoint Enterprise Protection 安全漏洞

Proofpoint Enterprise Protection is an application from Proofpoint USA. It provides the ability to protect e-mail. A security vulnerability exists in Proofpoint Enterprise Protection PPS/PoD version 8.19.0 and earlier versions. An attacker can exploit the vulnerability to escalate to root...

AIX is affected by a root privilege escalation vulnerability

IBM SECURITY ADVISORY First Issued: Wed Dec 14 08:27:58 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rmmlcacheadvisory.asc https://aix.software.ibm.com/aix/efixes/security/rmmlcacheadvisory.asc...

AIX is affected by a root privilege escalation vulnerability

IBM SECURITY ADVISORY First Issued: Wed Dec 14 08:27:58 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/rmmlcacheadvisory.asc https://aix.software.ibm.com/aix/efixes/security/rmmlcacheadvisory.asc...

A buffer overflow was discovered in NTFS-3G before 2022.10.3. Crafted metadata in an NTFS image can cause code execution. A local attacker can exploit this if the ntfs-3g binary is setuid root. A physically proximate attacker can exploit this if NTFS-3G software is configured to execute upon attachment of an external storage device.

...

[SECURITY] [DSA 5270-1] ntfs-3g security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5270-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso November 04, 2022 https://www.debian.org/security/faq -...

CVE-2022-33182

A privilege escalation vulnerability in Brocade Fabric OS CLI before Brocade Fabric OS v9.1.0, 9.0.1e, 8.2.3c, 8.2.0cbn5, could allow a local authenticated user to escalate its privilege to root using switch commands “supportlink”, “firmwaredownload”, “portcfgupload, license, and “fosexec”...

Red Hat Ceph 安全漏洞

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system without a single point of failure, based on POSIX Portable Operating System Interface, enabling fault-tolerant and seamless replication of data. ...