CVE-2020-24626: Improper Limitation of a Pathname to a Restricted Directory

Unathenticated directory traversal in the ReceiverServlet class doPost method can lead to arbitrary remote code execution in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

CVE-2020-24625: Improper Limitation of a Pathname to a Restricted Directory

Unathenticated directory traversal in the ReceiverServlet class doGet method can lead to arbitrary file reads in HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9...

Oracle Solaris Device Driver Utility Data Modification DoS

The vulnerability of the Device Driver Utility component of the Oracle Solaris operating system is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to modify, add, or delete data, or cause service failures...

HPESBGN04037 rev.1 - HPE Utility Computing Service (UCS) Meter, Multiple Remote Vulnerabilities

Potential Security Impact: Remote: Directory Traversal, Unauthenticated Arbitrary Code Execution, Unauthenticated Disclosure of Information SUPPORTED SOFTWARE VERSIONS: ONLY impacted versions are listed. HPE Pay per use PPU 1.9 - HPE UCS Meter CVSS Scores: | CVE | CVSS Vector | Base Score | | ---...

vega-util input validation error vulnerability

vega-util is a JavaScript utility program for Vega. The program provides a function generator, type checker, log messages, and more. An input validation error vulnerability exists in versions of vega-util prior to 1.13.1. The vulnerability stems from a networked system or product that does not...

CVE-2020-10056

A vulnerability has been identified in License Management Utility LMU All versions V2.4. The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated...

CVE-2020-10056

A vulnerability has been identified in License Management Utility LMU All versions V2.4. The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated...

Design/Logic Flaw

A vulnerability has been identified in License Management Utility LMU All versions V2.4. The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated...

CVE-2020-10056

CVE-2020-10056 affects Siemens License Management Utility (LMU) prior to v2.4. The lmgrd service runs with local SYSTEM privileges while its configuration can be modified by local users, enabling a local authenticated attacker to execute arbitrary commands with SYSTEM privileges. Publicly availab...

PT-2020-11886 · Unknown · License Management Utility

Name of the Vulnerable Software and Affected Versions: License Management Utility LMU versions prior to V2.4 Description: A security issue has been identified where the lmgrd service of the affected application runs with local SYSTEM privileges on the server, and its configuration can be modified...

CVE-2020-10056: Execution with Unnecessary Privileges

A vulnerability has been identified in License Management Utility LMU All versions V2.4. The lmgrd service of the affected application is executed with local SYSTEM privileges on the server while its configuration can be modified by local users. The vulnerability could allow a local authenticated...

CVE-2020-11133

u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130...

Out-of-bounds

u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130...

PT-2020-15776

Name of the Vulnerable Software and Affected Versions HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9 Description The issue concerns an unauthenticated directory traversal vulnerability in the ReceiverServlet class, specifically in the doGet method. This can lead to arbitrary...

PT-2020-15775

Name of the Vulnerable Software and Affected Versions HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9 Description The issue concerns an unauthenticated directory traversal vulnerability in the DownloadServlet class execute method. This can lead to arbitrary file reads,...

CVE-2020-11133: Buffer Copy without Checking Size of Input

u'Possible out of bound array write in rxdco cal utility due to lack of array bound check' in Snapdragon Compute, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile in MSM8998, QCS605, SDA845, SDM630, SDM636, SDM660, SDM670, SDM710, SDM845, SDM850, SXR1130...

PT-2020-15777

Name of the Vulnerable Software and Affected Versions HPE Pay Per Use PPU Utility Computing Service UCS Meter version 1.9 Description The issue concerns an unauthenticated directory traversal vulnerability in the ReceiverServlet class, specifically in the doPost method. This can lead to arbitrary...

Siemens License Management Utility

1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION: Low skill level to exploit Vendor: Siemens Equipment: License Management Utility Vulnerability: Execution with Unnecessary Privileges 2. RISK EVALUATION Successful exploitation of this vulnerability could allow local users to escalate privileges. 3...

CVE-2020-15167

In Miller command line utility using the configuration file support introduced in version 5.9.0, it is possible for an attacker to cause Miller to run arbitrary code by placing a malicious .mlrrc file in the working directory. See linked GitHub Security Advisory for complete details. A fix is rea...

DEBIAN-CVE-2020-15167

In Miller command line utility using the configuration file support introduced in version 5.9.0, it is possible for an attacker to cause Miller to run arbitrary code by placing a malicious .mlrrc file in the working directory. See linked GitHub Security Advisory for complete details. A fix is rea...