Improper access control

Dell DBUtilDrv2.sys driver versions 2.5 and 2.6 contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required...

CVE-2021-36276

Dell DBUtilDrv2.sys driver versions 2.5 and 2.6 contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required...

CVE-2021-36276

CVE-2021-36276 impacts the Dell DBUtilDrv2.sys driver (versions 2.5 and 2.6) with insufficient access control, allowing local privilege escalation, DoS, or information disclosure when a local authenticated user loads the vulnerable driver. In practice, ToddyCat attackers used BYOVD to install DBU...

CVE-2021-36276: Improper Authorization

Dell DBUtilDrv2.sys driver versions 2.5 and 2.6 contains an insufficient access control vulnerability which may lead to escalation of privileges, denial of service, or information disclosure. Local authenticated user access is required...

Dell DBUtilDrv2.sys 安全漏洞

DELL Dell DBUtilDrv2.sys is a driver for Dell devices from Dell USA. A security vulnerability exists in versions 2.5 and 2.6 of the Dell DBUtilDrv2.sys driver, which could lead to privilege escalation, denial of service, or information disclosure...

PT-2021-21193

Name of the Vulnerable Software and Affected Versions Dell DBUtilDrv2.sys driver versions 2.5 and 2.6 Description The issue is related to an insufficient access control vulnerability in the Dell DBUtilDrv2.sys driver, which may lead to escalation of privileges, denial of service, or information...

CVE-2020-36434

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

Double free

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

CVE-2020-36434

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

CVE-2020-36434

The CVE-2020-36434 issue affects the Rust crate sys-info prior to version 0.8.0. The root cause is a static/global list used to store temporary disk information; cleanup code (DFCleanup) assumes a single-threaded environment and can free the same memory twice when sys_info::disk_info is invoked c...

CVE-2020-36434

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

CVE-2020-36434: Double Free

An issue was discovered in the sys-info crate before 0.8.0 for Rust. sysinfo::diskinfo calls can trigger a double free...

PT-2021-11444

Name of the Vulnerable Software and Affected Versions: jeecg-boot CMS version 2.3 Description: An arbitrary file upload vulnerability in the "/jeecg-boot/sys/common/upload" API endpoint of jeecg-boot CMS allows attackers to execute arbitrary code. Recommendations: For jeecg-boot CMS version 2.3,...

CVE-2020-28088: Unrestricted Upload of File with Dangerous Type

An arbitrary file upload vulnerability in /jeecg-boot/sys/common/upload of jeecg-boot CMS 2.3 allows attackers to execute arbitrary code...

PT-2021-21319

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue allows an attacker to reset the password to the administrative interface of the router. This is possible due to a problem in the set sys init function in the login.cgi binary...

PT-2021-21317

Name of the Vulnerable Software and Affected Versions ProLink PRC2402M versions 1.0.18 and older Description The issue concerns a command injection in the set sys cmd function within the adm.cgi binary. This function is accessible when the page parameter is set to sysCMD, allowing the command...

CVE-2020-28087: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in /jeecg boot/sys/dict/loadtreedata of jeecg-boot CMS 2.3 allows attackers to access sensitive database information...

PT-2021-11443

Name of the Vulnerable Software and Affected Versions: jeecg-boot CMS version 2.3 Description: A SQL injection issue in the "/jeecg boot/sys/dict/loadtreedata" endpoint of jeecg-boot CMS allows attackers to access sensitive database information. Recommendations: For jeecg-boot CMS version 2.3,...

PT-2021-14610

Name of the Vulnerable Software and Affected Versions Dell EMC PowerScale OneFS affected versions not specified Description The issue allows a user with specific privileges, including ISI PRIV LOGIN SSH or ISI PRIV LOGIN CONSOLE and ISI PRIV SYS UPGRADE or ISI PRIV AUDIT, to provide an untrusted...

An admin can downgrade or remove a group with sys admin privilege

This vulnerability affects certain versions of Atlassian Dev Tools. Please describe the impact of the vulnerability here. No known vulnerability could be read off of the parent...