4590 matches found
CVE-2023-31096
An issue was discovered in Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 aka AGRSM64.sys. There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory IOCTL 0x1b2150. An attacker can exploit this to elevate privileges from a medium-integrity process to...
Incorrect Authorization
mattermost is vulnerable to Incorrect Authorization. An attacker can soft delete teams they are not part of...
Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver Buffer Error Vulnerability
Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver is a driver from Broadcom Corporation USA. A security vulnerability exists in Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver version 2.2.100.1 and earlier, which stems from the presence of a stack overflow vulnerability. An attacker could exploit...
CVE-2023-31096: Out-of-bounds Write
An issue was discovered in Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver through 2.2.100.1 aka AGRSM64.sys. There is Local Privilege Escalation to SYSTEM via a Stack Overflow in RTLCopyMemory IOCTL 0x1b2150. An attacker can exploit this to elevate privileges from a medium-integrity process to...
PT-2023-23152
Name of the Vulnerable Software and Affected Versions Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver versions through 2.2.100.1 Description An issue exists in the Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver AGRSM64.sys that allows for local privilege escalation to SYSTEM privileges. This i...
CVE-2023-31096
CVE-2023-31096 affects Broadcom LSI PCI-SV92EX Soft Modem Kernel Driver (AGRSM64.sys) up to version 2.2.100.1, enabling Local Privilege Escalation to SYSTEM via a stack overflow in RTLCopyMemory (IOCTL 0x1b2150). The issue can bypass kernel protections (AV, PPL) and may be used in BYOVD ransomwar...
Authentication Bypass
github.com/charmbracelet/soft-serve is vulnerable to Authentication Bypass. The vulnerability exists when the public key setting allow-keyless is true which allows an attacker to perform unauthorized actions...
Local privilege escalation due to improper soft link handling
...
Mattermost Server < 7.8.10 / 8.0.x < 8.0.2 / 8.1.0 Multiple Vulnerabilities (MMSA-2023-00222) (MMSA-2023-00224) (MMSA-2023-00230)
The version of Mattermost Server running on the remote host is prior to 7.8.10, 8.0.x prior to 8.0.2, or 8.1.0. It is, therefore, affected by multiple vulnerabilities: - Mattermost fails to properly check permissions when retrieving a post allowing for a System Role with the permission to manage...
CVE-2023-43809
Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...
Input validation
Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...
CVE-2023-43809 Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled
Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...
CVE-2023-43809
CVE-2023-43809 affects Soft Serve (Git server) prior to v0.6.2. The vulnerability stems from insufficient validation of the public-key step during the SSH handshake when keyboard-interactive authentication is enabled, allowing an unauthenticated, remote attacker to bypass public-key authenticatio...
CVE-2023-43809
Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the "allow-keyless"...
CVE-2023-43809 Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled
Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...
CVE-2023-43809 Soft Serve Public Key Authentication Bypass Vulnerability when Keyboard-Interactive SSH Authentication is Enabled
Soft Serve is a self-hostable Git server for the command line. Prior to version 0.6.2, a security vulnerability in Soft Serve could allow an unauthenticated, remote attacker to bypass public key authentication when keyboard-interactive SSH authentication is active, through the allow-keyless...
CVE-2023-44209
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 29051, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...
CVE-2023-44209
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 29051, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...
CVE-2023-44209
Local privilege escalation due to improper soft link handling. The following products are affected: Acronis Cyber Protect Cloud Agent Linux, macOS, Windows before build 29051, Acronis Cyber Protect 17 Linux, macOS, Windows before build 41186...