13228 matches found
DEBIAN-CVE-2022-27378
An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
ALPINE-CVE-2022-27378
An issue in the component Createtmptable::finalize of MariaDB Server v10.7 and below was discovered to allow attackers to cause a Denial of Service DoS via specially crafted SQL statements...
CVE-2022-27655
When a user opens a manipulated Universal 3D .u3d, 3difr.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
CVE-2022-26107
When a user opens a manipulated Jupiter Tesselation .jt, JTReader.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
CVE-2021-42255
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...
CVE-2021-42255
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...
CVE-2021-42255
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...
Directory traversal
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...
CVE-2022-27654
When a user opens a manipulated Photoshop Document .psd, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
CVE-2022-26108
When a user opens a manipulated Picture Exchange .pcx, 2d.x3d received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
CVE-2021-42255
CVE-2021-42255 affects BeyondTrust AppGuard Enterprise (pre-6.7.100.1). The vulnerability arises because the repair operation uses a Temporary File created in a directory with insecure permissions in the unprivileged user’s %TEMP% folder, enabling local users to escalate to SYSTEM privileges. CVS...
CVE-2021-42255
AppGuard Enterprise before 6.7.100.1 creates a Temporary File in a Directory with Insecure Permissions. Local users can gain SYSTEM privileges because a repair operation relies on the %TEMP% directory of an unprivileged user...
PT-2022-7042 · Adobe · Acrobat Reader +1
Name of the Vulnerable Software and Affected Versions: Acrobat Reader DC versions 17.012.30205 through 22.001.20085 Acrobat Reader DC versions 20.005.3031x and earlier Description: A use-after-free vulnerability in Adobe Acrobat and Reader could result in arbitrary code execution in the context o...
BeyondTrust AppGuard Enterprise 安全漏洞
BeyondTrust AppGuard Enterprise is BeyondTrust's easy-to-use, industry-leading security and lower cost all-in-one remote access and remote support solution. A security vulnerability exists in BeyondTrust AppGuard Enterprise through 6.6.20.2, which originates when the affected product creates a...
The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions, which allows a hacker to escalate their privileges.
The vulnerability of the Adobe Digital Editions e-book reading software relates to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow an attacker to enhance their privileges...
Git for Windows 代码问题漏洞
Git for Windows is the Git groups' Git for Windows. Git for Windows suffers from a code issue vulnerability that stems from a portion of the Git for Windows uninstaller being copied to and running in the current user's temporary directory. Any authenticated attacker can place malicious files...
PT-2022-2523 · Mcafee · Mcafee Agent
Name of the Vulnerable Software and Affected Versions: McAfee Agent versions prior to 5.7.6 Description: The issue is related to a local privilege escalation vulnerability that allows a low-privileged user to gain system privileges. This is achieved by exploiting the repair functionality, which...
PT-2022-10647
Name of the Vulnerable Software and Affected Versions KevinLAB Inc Building Energy Management System 4ST BEMS version 1.0.0 Description An Access Control issue exists due to an undocumented backdoor account. A malicious user can log in using this backdoor account with admin highest privileges and...
