Lucene search
K

3209 matches found

OSV
OSV
added 2021/10/04 9:15 p.m.35 views

CVE-2021-41091

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where the data directory typically /var/lib/docker contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traver...

6.3CVSS6.6AI score
Exploits0References5
Cvelist
Cvelist
added 2021/10/04 8:20 p.m.27 views

CVE-2021-41091 Insufficiently restricted permissions on data directory in Docker Engine

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where the data directory typically /var/lib/docker contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traver...

6.3CVSS7.1AI score0.04746EPSS
Exploits3References5
Debian CVE
Debian CVE
added 2021/10/04 8:20 p.m.86 views

CVE-2021-41091

Moby is an open-source project created by Docker to enable software containerization. A bug was found in Moby Docker Engine where the data directory typically /var/lib/docker contained subdirectories with insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traver...

6.3CVSS5.9AI score0.04746EPSS
Exploits3
OSV
OSV
added 2021/10/04 5:15 p.m.48 views

CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

7.8CVSS7.6AI score
Exploits0References7
OSV
OSV
added 2021/10/04 5:15 p.m.1 views

DEBIAN-CVE-2021-41103

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory...

7.8CVSS6.3AI score0.0025EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/10/04 12:0 a.m.2 views

Moby 安全漏洞

Moby is an open source project that aims to drive containerization of software and help the ecosystem make container technology mainstream. Moby suffers from a security vulnerability that stems from a bug found in Moby Docker Engine where the data directory typically var lib Docker contains...

6.3CVSS7.4AI score0.04746EPSS
Exploits3References14
Veracode
Veracode
added 2021/09/19 5:45 a.m.11 views

Privilege Escalation

seatd is vulnerable to privilege escalation. The vulnerability exists due to the system using execlp whichallows setuid root to be installed...

8.8CVSS3.8AI score0.00521EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2021/09/17 9:15 p.m.6 views

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

8.8CVSS0.00521EPSS
Exploits0References1
Prion
Prion
added 2021/09/17 9:15 p.m.10 views

Privilege escalation

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

8.5CVSS8.9AI score0.00521EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/09/17 8:36 p.m.16 views

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

9.2AI score0.00521EPSS
Exploits0References1
Debian CVE
Debian CVE
added 2021/09/17 8:36 p.m.13 views

CVE-2021-41387

seatd-launch in seatd 0.6.x before 0.6.2 allows privilege escalation because it uses execlp and may be installed setuid root...

8.8CVSS9AI score0.00521EPSS
Exploits0
CNNVD
CNNVD
added 2021/09/17 12:0 a.m.2 views

Seatd 代码问题漏洞

Seatd is an administrative daemon. It is used to mediate access to shared devices graphics, input. A security vulnerability exists in seatd that stems from seatd-launch in the software using execlp and possibly installing setuid root, which can be exploited by an attacker to achieve elevation of...

8.8CVSS7.8AI score0.00521EPSS
Exploits0References2
OSV
OSV
added 2021/09/07 3:15 p.m.1 views

DEBIAN-CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

7.8CVSS7.4AI score0.00116EPSS
Exploits0References1
AlpineLinux
AlpineLinux
added 2021/09/07 3:15 p.m.33 views

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

7.8CVSS8.5AI score0.00116EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2021/09/07 3:15 p.m.39 views

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

7.8CVSS7AI score0.00116EPSS
Exploits0References4
Cvelist
Cvelist
added 2021/09/07 12:0 a.m.26 views

CVE-2021-35267

NTFS-3G versions 2021.8.22, a stack buffer overflow can occur when correcting differences in the MFT and MFTMirror allowing for code execution or escalation of privileges when setuid-root...

8.5AI score0.00116EPSS
Exploits0References8
Positive Technologies
Positive Technologies
added 2021/08/20 12:0 a.m.3 views

PT-2021-5803 · Ntfs-3G +7 · Ntfs-3G +7

Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: A stack buffer overflow can occur when correcting differences in the MFT and MFTMirror, allowing for code execution or escalation of privileges when setuid-root. The vulnerability is related to...

7.8CVSS7.6AI score0.08331EPSS
Exploits13References346
Mageia
Mageia
added 2021/06/28 9:16 p.m.31 views

Updated bash packages fix a security vulnerability

A privilege escalation vulnerability was found in bash in the way it dropped privileges when started with an effective user id not equal to the real user id. Bash may be vulnerable to this flaw if the setuid permission is set and the owner of the bash program itself is a non-root user. A local...

7.8CVSS2AI score0.50225EPSS
Exploits5References2
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/25 4:46 p.m.13 views

Security Bulletin: IBM Spectrum Scale and IBM GPFS are affected by a security vulnerability (CVE-2016-0392)

Summary A security vulnerability has been identified in all levels of IBM Spectrum Scale and IBM GPFS that could allow a local attacker to inject commands into setuid file parameters and execute commands as root. Vulnerability Details CVEID: CVE-2016-0392 DESCRIPTION: IBM General Parallel File...

8.4CVSS8AI score0.00058EPSS
Exploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2021/06/25 4:46 p.m.16 views

Security Bulletin: IBM Spectrum Scale and IBM GPFS are affected by security vulnerabilities (CVE-2016-2985 and CVE-2016-2984)

Summary Security vulnerabilities have been identified in all levels of IBM Spectrum Scale and IBM GPFS that could allow: - a local attacker to execute commands as root by setting environment variables processed by setuid programs CVE-2016-2985 - a local attacker to execute commands as root by...

7CVSS1.3AI score0.00039EPSS
Exploits0Affected Software1
Rows per page
Query Builder