Lucene search
+L

15029 matches found

CISA KEV Catalog
CISA KEV Catalog
added 2022/09/08 12:00 a.m.41 views

Android OS Privilege Escalation Vulnerability

The vold volume manager daemon in Android kernel trusts messages from a PFNETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor...

7.8CVSS6.3AI score0.41634EPSS
SaveIn wildExploits1
OSV
OSV
added 2022/09/07 9:15 a.m.12 views

CVE-2022-21950

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE...

5.3CVSS5.8AI score0.0015EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/07 9:15 a.m.21 views

Improper access control

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE...

4.3CVSS5AI score0.0015EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2022/09/07 8:40 a.m.51 views

CVE-2022-21950 canna: unsafe handling of /tmp/.iroha_unix directory

A Improper Access Control vulnerability in the systemd service of cana in openSUSE Backports SLE-15-SP3, openSUSE Backports SLE-15-SP4 allows local users to hijack the UNIX domain socket This issue affects: openSUSE Backports SLE-15-SP3 canna versions prior to canna-3.7p3-bp153.2.3.1. openSUSE...

5.3CVSS5.6AI score0.0015EPSS
SaveExploits0References1
Tenable Nessus
Tenable Nessus
added 2022/09/07 12:00 a.m.34 views

Debian DSA-5226-1 : pcs - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5226 advisory. - A flaw was found in the Pacemaker configuration tool pcs. The pcs daemon was allowing expired accounts, and accounts with expired passwords to login when using...

8.8CVSS7.4AI score0.01953EPSS
SaveExploits1References8
Prion
Prion
added 2022/09/06 11:15 p.m.22 views

Authentication flaw

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 3354 and prior is vulnerable to CWE-306: Missing Authentication for Critical Function, which allows unauthorized users to change the operator account password via webserver commands by monitoring web socket communications from an...

7.5CVSS9.7AI score0.00938EPSS
SaveExploits0References1Affected Software1
Debian
Debian
added 2022/09/06 8:35 p.m.50 views

[SECURITY] [DSA 5226-1] pcs security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5226-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff September 06, 2022 https://www.debian.org/security/faq -...

8.8CVSS8.9AI score0.01953EPSS
SaveExploits1
ATTACKERKB
ATTACKERKB
added 2022/09/06 6:15 p.m.5 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7AI score0.00315EPSS
SaveExploits0References9
NVD
NVD
added 2022/09/06 6:15 p.m.21 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS0.00315EPSS
SaveExploits0References4
OSV
OSV
added 2022/09/06 6:15 p.m.6 views

DEBIAN-CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.5AI score0.00315EPSS
SaveExploits0References1
Prion
Prion
added 2022/09/06 6:15 p.m.20 views

Privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

4.3CVSS7.7AI score0.00315EPSS
SaveExploits0References4Affected Software2
OSV
OSV
added 2022/09/06 6:15 p.m.7 views

UBUNTU-CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.1AI score0.00315EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
added 2022/09/06 6:15 p.m.52 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7AI score0.00315EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2022/09/06 5:18 p.m.43 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

8.1AI score0.00315EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2022/09/06 5:18 p.m.64 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS7.8AI score0.00315EPSS
SaveExploits0
CVE
CVE
added 2022/09/06 5:18 p.m.126 views

CVE-2022-2735

CVE-2022-2735 affects the PCS project. The root cause is incorrect permissions on the Unix socket used for internal PCS daemon communication, enabling a privilege escalation by obtaining an authentication token for a hacluster user. With that token, an attacker could gain complete control over th...

7.8CVSS7.7AI score0.00315EPSS
SaveExploits0References4Affected Software1
OSV
OSV
added 2022/09/06 5:18 p.m.31 views

CVE-2022-2735

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.9AI score
SaveExploits0References6
RedHat Linux
RedHat Linux
added 2022/09/05 3:21 p.m.20 views

pcs: obtaining an authentication token for hacluster user could lead to privilege escalation

A vulnerability was found in the PCS project. This issue occurs due to incorrect permissions on a Unix socket used for internal communication between PCS daemons. A privilege escalation could happen by obtaining an authentication token for a hacluster user. With the "hacluster" token, this flaw...

7.8CVSS5.8AI score0.00315EPSS
SaveExploits0References5
zdt
zdt
added 2022/09/05 12:00 a.m.263 views

Mobile Mouse 3.6.0.4 Remote Code Execution Exploit

Exploit Title: Mobile Mouse 3.6.0.4 Remote Code Execution Exploit Author: Chokri Hammedi Vendor Homepage: https://mobilemouse.com/ Software Link: https://www.mobilemouse.com/downloads/setup.exe Version: 3.6.0.4 Tested on: Windows 10 Enterprise LTSC Build 17763 !/usr/bin/env python3 import socket...

7.4AI score
SaveExploits0
NVD
NVD
added 2022/09/02 12:15 p.m.35 views

CVE-2022-22098

Memory corruption in multimedia driver due to untrusted pointer dereference while reading data from socket in Snapdragon Auto...

8.4CVSS0.00124EPSS
SaveExploits0References1
Rows per page
Query Builder