All CVEs — page 243 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The Deskin installer service allows unprivileged local users to execute arbitrary packages as root without authentication, enabling privilege escalation to full system compromise. This vulnerability is particularly dangerous because it can be exploited by any local user to gain root access.
The vulnerability allows local attackers to bypass authorization checks in System Informer's helper service, enabling them to execute arbitrary code with SYSTEM privileges by connecting from any Authenticode-signed process. This creates a privilege escalation vector where attackers can load malicious code into Microsoft-signed processes like rundll32.exe and call privileged APIs.
The vulnerability allows attackers to inject OS commands via the format parameter, leading to potential command execution as the Skyeye service account.
This vulnerability allows unauthenticated attackers to execute commands on the executor host by posting malicious job scripts through the JobInfoController endpoints.
This vulnerability allows an authenticated user with Viewer privileges to traverse relative paths and write attacker-controlled content to the file system, potentially leading to unauthorized file creation or modification and, under certain conditions, arbitrary code execution.
IBM Guardium Data Protection 12.2 contains a path traversal vulnerability in its GIM file-upload functionality that allows unauthenticated attackers to write arbitrary files to the Collector system. This flaw enables attackers to potentially compromise the data protection platform and gain unauthorized access to sensitive data.
The flaw allows unauthenticated attackers to execute arbitrary container images and gain control of managed edge clusters, posing a significant security risk.
IBM Guardium Data Protection 12.2 allows local attackers to bypass signature verification during patch installation, enabling execution of arbitrary code with root privileges. This represents a critical privilege escalation vulnerability that can be exploited without user interaction once local access is gained.
The vulnerability stems from a hard-coded recovery key in IBM Guardium's pkcrypto passkey component, allowing local attackers to recover root passwords and escalate privileges. This weak cryptographic protection creates a persistent backdoor that can be exploited without authentication.
IBM Guardium Data Protection's cp_wrapper component allows local users to escalate privileges to root, enabling access to sensitive system files. This represents a significant security risk as it can lead to full system compromise from a low-privileged account.
The flaw allows unauthenticated attackers to inject malicious scripts into the Quick Search results grid, potentially leading to browser-based attacks on authenticated users.
A heap-based buffer overflow exists in IBM Guardium Data Protection's TDS login reassembly functionality, allowing unauthenticated remote attackers to potentially cause denial of service or execute arbitrary code by sending crafted TDS login fragments that exceed a fixed-size buffer.
A heap-based buffer overflow exists in IBM Guardium Data Protection's MongoDB protocol parser that can be triggered by sending a malformed SCRAM username with excessive length. This vulnerability allows remote attackers to cause memory corruption potentially leading to denial of service or arbitrary code execution.
A heap-based out-of-bounds read vulnerability exists in IBM Guardium Data Protection's TDS7 LOGIN7 protocol parser, allowing remote attackers to potentially disclose sensitive information or cause denial of service by sending malformed packets with invalid offset or length values.