20 matches found
com.hortonworks.registries:storage-tool (>=0.1.0, <=0.3.1), com.rocketfuel.sdbc:mariadb-jdbc_2.11 (2.0.1) +6 more potentially affected by CVE-2026-61700 via org.mariadb.jdbc:mariadb-java-client (1.5.5)
org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.hortonworks.registries:storage-tool =0.1.0, =2.0, =1.19.0, =1.0, =1.0, =1.7.17 Sour...
com.hortonworks.registries:storage-tool (>=0.1.0, <=0.3.1), com.rocketfuel.sdbc:mariadb-jdbc_2.11 (2.0.1) +6 more potentially affected by CVE-2026-55858 via org.mariadb.jdbc:mariadb-java-client (1.5.5)
org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.hortonworks.registries:storage-tool =0.1.0, =2.0, =1.19.0, =1.0, =1.0, =1.7.17 Sour...
com.hortonworks.registries:storage-tool (>=0.1.0, <=0.3.1), com.rocketfuel.sdbc:mariadb-jdbc_2.11 (2.0.1) +6 more potentially affected by CVE-2026-55857 via org.mariadb.jdbc:mariadb-java-client (1.5.5)
org.mariadb.jdbc:mariadb-java-client MAVEN version 1.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.mariadb.jdbc:mariadb-java-client and may be impacted: - com.hortonworks.registries:storage-tool =0.1.0, =2.0, =1.19.0, =1.0, =1.0, =1.7.17 Sour...
Intel Memory and Storage Tool < 2.5.0 Denial of Service (INTEL-SA-01164)
The version of Intel Memory and Storage Tool installed on the remote host is prior to 2.5.0. It is, therefore, affected by a vulnerability as referenced in the INTEL-SA-01164 advisory. - Incorrect default permissions in software installer for IntelR MAS GUI may allow an authenticated user to...
CVE-2025-36511
Incorrect default permissions for some IntelR Memory and Storage Tool before version 2.5.2 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...
CVE-2025-36511
Incorrect default permissions for some IntelR Memory and Storage Tool before version 2.5.2 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...
Intel® Memory and Storage Tool (Intel® MAS) Software Advisory
Summary: A potential security vulnerability for some Intel® Memory and Storage Tool Intel® MAS Software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-36511 Description: Incorrect default...
PT-2026-7315
Name of the Vulnerable Software and Affected Versions IntelR Memory and Storage Tool versions prior to 2.5.2 Description The IntelR Memory and Storage Tool, in versions before 2.5.2, has default permissions that may allow a local escalation of privilege. An authenticated user with a high complexi...
CVE-2025-36511: Incorrect Default Permissions
Incorrect default permissions for some IntelR Memory and Storage Tool before version 2.5.2 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high complexity attack may enable escalation of privilege. This...
Trend Micro Password Manager Symbolic Link Privilege Escalation
The vulnerability of the Trend Micro Password Manager storage tool is related to the improper handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary code within the SYSTEM context...
Intel Memory and Storage Tool Software Uncontrolled Search Path
The vulnerability of the Intel Memory and Storage Tool software for monitoring and managing RAM and solid-state drives is related to an uncontrollable element in the search process. Exploiting this vulnerability can allow attackers to enhance their privileges...
svc_dc utility Arbitrary Command Execution Root Privileges
The vulnerability of the svcdc utility in the operating environment for managing and maintaining data storage in the Dell Unity Operating Environment exists due to the lack of measures taken to neutralize special elements used in the operating system’s commands. Exploiting this vulnerability allo...
Intel Memory and Storage Tool < 2.3 Multiple Vulnerabilities (INTEL-SA-00967)
The version of Intel Memory and Storage Tool installed on the remote host is prior to 2.3. It is, therefore, affected by multiple vulnerabilities as referenced in the INTEL-SA-00967 advisory. - Improper initialization in some IntelR MAS software before version 2.3 may allow an authenticated user ...
Intel® SSD DC Firmware Advisory
Summary: A potential security vulnerability in some Intel® Solid State Drive SSD Data Center DC products may allow information disclosure. Intel is releasing firmware updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0148 Description: Insertion of informatio...
McAfee True Key Windows Client Unauthorized Access
The vulnerability of the McAfee True Key Windows Client password storage tool relates to insufficient protection of registration data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
Microsoft OneDrive suffers from a DLL hijacking vulnerability (CNVD-2021-03304)
OneDrive is Microsoft's next-generation network storage tool, renamed from SkyDrive.OeDrive's versions span multiple endpoints, web, mobile, and PC. Microsoft OneDrive has a DLL hijacking vulnerability, which can be exploited by attackers to remotely control a user's computer or implant a Trojan...
McAfee True Key Windows Client Privilege Bypass Command Execution
The vulnerability of the McAfee True Key Windows Client password storage tool is related to privilege management errors. Exploiting this vulnerability could allow an attacker to execute arbitrary commands...
McAfee True Key Windows Client Privilege Bypass RCE
The vulnerability of the McAfee True Key Windows Client password storage tool is related to privilege management errors. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
HDF5 Divide by Zero Error Vulnerability
HDF5 is a free suite of tools for managing the storage of different types of data that can be managed, manipulated, viewed, analyzed, and generated in portable formats. A security vulnerability exists in the 'H5Dchunkinit' function in the H5Dchunk.c file in HDF5 version 1.10.2. A remote attacker...
OnCommand Workflow Automation Code Execution
The OnCommand Workflow Automation tool installer installs the JDWP service Java Debugging Wire Protocol. This service allows a remote attacker to execute arbitrary code through an unspecified vector...