Cisco IOS XE Software Privilege Escalation (cisco-sa-XE-FSM-Yj8qJbJc)

According to its self-reported version, Cisco IOS-XE Software is affected by a software privilege escalation vulnerability. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker could exploit this vulnerability by bypassi...

CVE-2021-1391

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker...

Privilege escalation

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker...

CVE-2021-1391 Cisco IOS and IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the dragonite debugger of Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on the device. An attacker...

Cisco IOS and IOS XE Software Privilege Escalation Vulnerability

A vulnerability in the dragonite debugger of Cisco IOS Software and Cisco IOS XE Software could allow an authenticated, local attacker to escalate from privilege level 15 to root privilege. The vulnerability is due to the presence of development testing and verification scripts that remained on t...

CVE-2021-20292

There is a flaw reported in the Linux kernel in versions before 5.9 in drivers/gpu/drm/nouveau/nouveausgdma.c in nouveausgdmacreatettm in Nouveau DRM subsystem. The issue results from the lack of validating the existence of an object prior to performing operations on the object. An attacker with ...

MGASA-2021-0120 Updated firejail package fixes a security vulnerability

Roman Fiedler discovered a vulnerability in the OverlayFS code in firejail, which could result in root privilege escalation. This update disables OverlayFS support in firejail CVE-2021-26910...

Updated firejail package fixes a security vulnerability

Roman Fiedler discovered a vulnerability in the OverlayFS code in firejail, which could result in root privilege escalation. This update disables OverlayFS support in firejail CVE-2021-26910...

Huawei EulerOS: Security Advisory for trousers (EulerOS-SA-2021-1563)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE Security Update : firejail (openSUSE-2021-271)

This update for firejail fixes the following issues : firejail 0.9.64.4 is shipped to openSUSE Leap 15.2 - CVE-2021-26910: Fixed root privilege escalation due to race condition boo1181990 Update to 0.9.64.4 : - disabled overlayfs, pending multiple fixes - fixed launch firefox for open url in...

OPENSUSE-SU-2021:0271-1 Security update for firejail

This update for firejail fixes the following issues: firejail 0.9.64.4 is shipped to openSUSE Leap 15.2 - CVE-2021-26910: Fixed root privilege escalation due to race condition boo1181990 Update to 0.9.64.4: disabled overlayfs, pending multiple fixes fixed launch firefox for open url in...

[SECURITY] [DSA 4849-1] firejail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4849-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 09, 2021 https://www.debian.org/security/faq -...

[SECURITY] [DSA 4849-1] firejail security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4849-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso February 09, 2021 https://www.debian.org/security/faq -...

The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network allows a hacker to elevate their privileges to the root level.

The vulnerability of the tcpdump tool for capturing and analyzing network traffic in a software-defined Cisco SD-WAN network is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to elevate their privileges to the root level...

CentOS 8 : virt:rhel (CESA-2019:3345)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:3345 advisory. - QEMU: qxl: null pointer dereference while releasing spice resources CVE-2019-12155 - ntfs-3g: heap-based buffer overflow leads to local root privileg...

MGASA-2021-0056 Updated sudo packages fix security vulnerability

A serious heap-based buffer overflow has been discovered in sudo that is exploitable by any local user. It has been given the name Baron Samedit by its discoverer. The bug can be leveraged to elevate privileges to root, even if the user is not listed in the sudoers file. User authentication is no...

Debian: Security Advisory (DLA-2534-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 4839-1] sudo security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4839-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso January 26, 2021 https://www.debian.org/security/faq -...

CVE-2021-0218 Junos OS: Command injection vulnerability in license-check daemon

A command injection vulnerability in the license-check daemon of Juniper Networks Junos OS that may allow a locally authenticated attacker with low privileges to execute commands with root privilege. license-check is a daemon used to manage licenses in Junos OS. To update licenses, a user execute...

CVE-2021-1192

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV110W, RV130, RV130W, and RV215W Routers could allow an authenticated, remote attacker to execute arbitrary code or cause an affected device to restart unexpectedly. The vulnerabilities are due to improper...