20 matches found
CVE-1999-0653
A component service related to NIS+ is running...
EUVD-2021-26058
Malware in sbrugna...
EUVD-1999-0615
Malware in sbrugna...
CVE-2021-39701
In serviceConnection of ControlsProviderLifecycleManager.kt, there is a possible way to keep service running in foreground without notification or permission due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2024-1683 DLL Injection in Tenable Identity Exposure Secure Relay
A DLL injection vulnerability exists where an authenticated, low-privileged local attacker could modify application files on the TIE Secure Relay host, which could allow for overriding of the configuration and running of new Secure Relay services...
Trojan.Win32 BankShot MVID-2024-0669 Buffer Overflow
Discovery / credits: Malvuln John Page aka hyp3rlinx c 2024 Original source: https://malvuln.com/advisory/f2fd6a7b400782bb43499e722fb62cf4.txt Contact: [email protected] Media: twitter.com/malvuln Threat: Trojan.Win32 BankShot Vulnerability: Remote Stack Buffer Overflow SEH Description: The...
CVE-2022-20266
In Companion, there is a possible way to keep a service running with elevated importance without showing foreground service notification due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed fo...
CVE-2021-0705
In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User...
CVE-2021-0705
In sanitizeSbn of NotificationManagerService.java, there is a possible way to keep service running in foreground and keep granted permissions due to Bypass of Background Service Restrictions. This could lead to local escalation of privilege with no additional execution privileges needed. User...
ZSQL: Local Trust Authentication
In local trust authentication mode, a database user can connect to the local database in password-free mode using zsql after the local connection is authenticated. Then, this user can maintain database accounts. You are advised to disable the local trust authentication during service running...
Network Data Management Protocol (NDMP) Detection
A NDMP Service is running at this host. NDMP is used primarily for backup of network-attached storage NAS devices, such as storage systems. Copyright C 2019 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...
Windows NDProxy Privilege Escalation XP SP3 x86 and 2003 SP2 x86 (MS14-002) Exploit
NDPROXY is a system-provided driver that interfaces WAN miniport drivers, call managers, and miniport call managers to the Telephony Application Programming Interfaces TAPI services. The vulnerability is caused when the NDProxy.sys kernel component fails to properly validate input. An attacker wh...
Microsoft Remote Desktop Protocol (RDP) Detection
A service supporting the Microsoft Remote Desktop Protocol RDP is running at this host. Copyright C 2009 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
CVE-1999-0625
The set of connected sources documents CVE-1999-0625 as related to the rpc.rquotad service running. The Red Hat entry and the CVE/NVD records confirm the existence of this service but provide no public technical details such as affected product versions, root cause, or concrete exploit paths with...
CDE Subprocess Control Service (dtspcd) Detection
The 'dtspcd' service is running. This service deals with the CDE interface for the X11 system. C Tenable Network Security, Inc. include"compat.inc"; ifdescription scriptid10833; scriptversion"$Revision: 1.25 $"; scriptcvsdate"$Date: 2011/03/11 21:52:32 $"; scriptnameenglish:"CDE Subprocess Contro...
CVE-1999-0628
The CVE-1999-0628 issue involves the rwho/rwhod service, which exposes machine status and user information. Documents reference the vulnerable component as the rwho/rwhod service; no specific product/vendor/version is named. The impact description indicates partial confidentiality exposure, with ...
CVE-1999-0643
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...
CVE-1999-0632
The RPC portmapper service is running...
CVE-1999-0633
Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: None. Reason: this candidate is solely about a configuration that does not directly introduce security vulnerabilities, so it is more appropriate to cover under the Common Configuration Enumeration CCE. Notes: the former description i...
PT-1999-1239 · Undefined · Undefined
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned. Description: The systat service is running. There is no additional information provided about the issue, such as its nature or potential impact. Recommendations: At the moment, there is no...