CWE-273 Archives - CVE Vulnerability

CVE-2018-8599

Sun, 26 Feb 2023 06:51:32 +0000

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka “Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability.” This affects Microsoft Visual Studio, Windows Server 2019, Windows Server 2016, Windows 10, Windows 10 Servers.

The post CVE-2018-8599 appeared first on CVE Vulnerability.

CVE-2018-16466

Sun, 26 Feb 2023 06:47:04 +0000

Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens.

The post CVE-2018-16466 appeared first on CVE Vulnerability.

CVE-2020-24361

Sun, 26 Feb 2023 06:39:25 +0000

SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.

The post CVE-2020-24361 appeared first on CVE Vulnerability.

CVE-2020-14298

Sun, 26 Feb 2023 06:37:16 +0000

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which was previously fixed via RHSA-2019:0304. This issue could allow a malicious or compromised container to compromise the container host and other containers running on the same host. This issue only affects docker version 1.13.1-108.git4ef4b30.el7, shipped in Red Hat Enterprise Linux 7 Extras. Both earlier and later versions are not affected.

The post CVE-2020-14298 appeared first on CVE Vulnerability.

CVE-2020-14300

Sun, 26 Feb 2023 06:37:16 +0000

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053) included an incorrect version of runc that was missing multiple bug and security fixes. One of the fixes regressed in that update was the fix for CVE-2016-9962, that was previously corrected in the docker packages in Red Hat Enterprise Linux 7 Extras via RHSA-2017:0116 (https://access.redhat.com/errata/RHSA-2017:0116). The CVE-2020-14300 was assigned to this security regression and it is specific to the docker packages produced by Red Hat. The original issue – CVE-2016-9962 – could possibly allow a process inside container to compromise a process entering container namespace and execute arbitrary code outside of the container. This could lead to compromise of the container host or other containers running on the same container host. This issue only affects a single version of Docker, 1.13.1-108.git4ef4b30, shipped in Red Hat Enterprise Linux 7. Both earlier and later versions are not affected.

The post CVE-2020-14300 appeared first on CVE Vulnerability.

CVE-2019-20044

Sun, 26 Feb 2023 06:32:17 +0000

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the –no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges can be restored by executing MODULE_PATH=/dir/with/module zmodload with a module that calls setuid().

The post CVE-2019-20044 appeared first on CVE Vulnerability.

CVE-2019-18276

Sun, 26 Feb 2023 06:31:43 +0000

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop privileges by setting its effective UID to its real UID. However, it does so incorrectly. On Linux and other systems that support “saved UID” functionality, the saved UID is not dropped. An attacker with command execution in the shell can use “enable -f” for runtime loading of a new builtin, which can be a shared object that calls setuid() and therefore regains privileges. However, binaries running with an effective UID of 0 are unaffected.

The post CVE-2019-18276 appeared first on CVE Vulnerability.

CVE-2019-14879

Sun, 26 Feb 2023 06:30:44 +0000

A vulnerability was found in Moodle versions 3.7.x before 3.7.3, 3.6.x before 3.6.7 and 3.5.x before 3.5.9. When a cohort role assignment was removed, the associated capabilities were not being revoked (where applicable).

The post CVE-2019-14879 appeared first on CVE Vulnerability.

CVE-2021-3982

Thu, 23 Feb 2023 14:11:36 +0000

Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way CAP_SYS_NICE is currently implemented and eventually load code to increase its process scheduler priority leading to possible DoS of other services running in the same machine.

The post CVE-2021-3982 appeared first on CVE Vulnerability.

CVE-2021-37839

Thu, 23 Feb 2023 14:11:02 +0000

Apache Superset up to 1.5.1 allowed for authenticated users to access metadata information related to datasets they have no permission on. This metadata included the dataset name, columns and metrics.

The post CVE-2021-37839 appeared first on CVE Vulnerability.