CVE-2024-1724

CVE-2024-1724 affects snapd prior to 2.62, where AppArmor sandbox enforcement failed to restrict writes to $HOME/bin. In Ubuntu, this path is added to the user PATH when present, enabling a user-wurnished malicious snap using the home plug to drop scripts into PATH and potentially execute them ou...

PT-2024-22657 · Dell · Dell Repository Manager

Name of the Vulnerable Software and Affected Versions: Dell Repository Manager versions prior to 3.4.5 Description: The issue concerns a Path Traversal vulnerability in the API module. A local attacker with low privileges could potentially exploit this to gain unauthorized write access to files o...

CVE-2024-1654

This vulnerability potentially allows unauthorized write operations which may lead to remote code execution. An attacker must already have authenticated admin access and knowledge of both an internal system identifier and details of another valid user to exploit this...

Vagrant’s Windows Installer Allowed Directory Junction Write

Summary The Vagrant Windows installer targeted a custom location with a non-protected path that could be junctioned, introducing potential for unauthorized file system writes. This vulnerability, CVE-2023-5834, was fixed in Vagrant 2.4.0. Background Vagrant is distributed in a range of...

PT-2023-32366 · Hashicorp · Hashicorp Vagrant

Name of the Vulnerable Software and Affected Versions: HashiCorp Vagrant versions prior to 2.4.0 Description: The issue concerns HashiCorp Vagrant's Windows installer, which targeted a custom location with a non-protected path that could be junctioned. This introduced the potential for unauthoriz...

Siemens RUGGEDCOM CROSSBOW 安全漏洞

RUGGEDCOM CROSSBOW is a secure access management solution designed to provide NERC CIP-compliant access to intelligent electronic devices. an access control error vulnerability exists in Siemens RUGGEDCOM CROSSBOW, which stems from the failure of the affected application's client-side query handl...

PT-2023-1879 · Siemens · Ruggedcom Crossbow

Name of the Vulnerable Software and Affected Versions: RUGGEDCOM CROSSBOW versions prior to V5.2 Description: The issue is related to the client query handler of the secure access management system, which has inadequate authorization procedure. This could allow a remote attacker to perform...

HUAWEI EMUI 安全漏洞

Huawei Emui is an Android-based mobile operating system developed by Huawei, a Chinese company. An access control error vulnerability exists in Huawei EMUI version 12.0.0, which stems from an unauthorized rewrite vulnerability in the memory access management module on the ACPU. An attacker can...

CVE-2021-28710

CVE-2021-28710 affects the Xen hypervisor on x86 VT-d IOMMUs when sharing page tables. The bug arises because the top-level strip of the 3-level page tables was skipped while inserting the root page-table address into the hardware pagetable base register, allowing a guest to write to leaf page-ta...

Important: kernel-livepatch-4.14.209-160.335

Issue Overview: A flaw was found in the Linux kernel's implementation of the Linux SCSI target host, where an authenticated attacker could write to any block on the exported SCSI device backing store. This flaw allows an authenticated attacker to send LIO block requests to the Linux system to...

CVE-2020-35551

An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 Exynos chipsets software. They allow attackers to conduct RPMB state-change attacks because an unauthorized RPMB write operation can be replayed, a related issue to CVE-2020-13799. The Samsung ID is SVE-2020-18100 Decemb...

Multiple Samsung security vulnerabilities

Samsung mobile devices O are products of Samsung Corporation in South Korea.Samsung mobile devices O is a series of cell phones.Samsung mobile devices P is a series of mobile hard drives.Samsung mobile devices Q is a series of TVs.Samsung mobile devices Q is a series of TVs. Samsung mobile device...

CVE-2013-7489

A flaw was found in python-beaker, where it is affected by the deserialization of untrusted data. This flaw allows an attacker to enter malicious payloads into the cache database for example, if they are on the network and have credentials for the database, to perform remote code execution on the...

Sandbox Restrictions Bypass

github.com/opencontainers/runc is vulnerable to sandbox restrictions bypass. An attacker who controls the container image for two containers that share a volume will be able to mount arbitrary volumes in a race condition during container initialization via a symlink that is added to the rootfs...

Debian: Security Advisory (DSA-4583-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

DirtyCow Linux privilege escalation vulnerability analysis CVE-2 0 1 6-5 1 9 5-the vulnerability warning-the black bar safety net

0x0 overview DirtyCow vulnerability is the recent burst of the Linux kernel local elevation of privilege vulnerability. The vulnerability is easy to trigger the use of simple and stable, the impact of multiple systems be considered a good vulnerability. But the vulnerability has existed for many...

Debian DLA-597-1 : libupnp security update

It has been discovered that libupnp's default behaviour allows anyone to write to the filesystem of the system running a libupnp-based server application. For Debian 7 'Wheezy', these problems have been fixed in version 1.6.17-1.2+deb7u1. We recommend that you upgrade your libupnp packages. NOTE:...

CVE-2004-1190

SUSE Linux before 9.1 and SUSE Linux Enterprise Server before 9 do not properly check commands sent to CD devices that have been opened read-only, which could allow local users to conduct unauthorized write activities to modify the firmware of associated SCSI devices...