CWE-367 Archives - CVE Vulnerability

CVE-2008-2958

Sun, 26 Feb 2023 09:09:46 +0000

Race condition in (1) checkinstall 1.6.1 and (2) installwatch allows local users to overwrite arbitrary files and have other impacts via symlink and possibly other attacks on temporary working directories.

The post CVE-2008-2958 appeared first on CVE Vulnerability.

CVE-2008-1570

Sun, 26 Feb 2023 09:09:05 +0000

Race condition in the create_lockpath function in policyd-weight 0.1.14 beta-16 allows local users to modify or delete arbitrary files by creating the LOCKPATH directory, then modifying it after the symbolic link check occurs. NOTE: this is due to an incomplete fix for CVE-2008-1569.

The post CVE-2008-1570 appeared first on CVE Vulnerability.

CVE-2018-8584

Sun, 26 Feb 2023 06:51:32 +0000

An elevation of privilege vulnerability exists when Windows improperly handles calls to Advanced Local Procedure Call (ALPC), aka “Windows ALPC Elevation of Privilege Vulnerability.” This affects Windows Server 2016, Windows 10, Windows Server 2019, Windows 10 Servers.

The post CVE-2018-8584 appeared first on CVE Vulnerability.

CVE-2018-8449

Sun, 26 Feb 2023 06:51:27 +0000

A security feature bypass exists when Device Guard incorrectly validates an untrusted file, aka “Device Guard Security Feature Bypass Vulnerability.” This affects Windows Server 2016, Windows 10, Windows 10 Servers.

The post CVE-2018-8449 appeared first on CVE Vulnerability.

CVE-2018-6693

Sun, 26 Feb 2023 06:50:48 +0000

An unprivileged user can delete arbitrary files on a Linux system running ENSLTP 10.5.1, 10.5.0, and 10.2.3 Hotfix 1246778 and earlier. By exploiting a time of check to time of use (TOCTOU) race condition during a specific scanning sequence, the unprivileged user is able to perform a privilege escalation to delete arbitrary files.

The post CVE-2018-6693 appeared first on CVE Vulnerability.

CVE-2018-16872

Sun, 26 Feb 2023 06:47:13 +0000

A flaw was found in qemu Media Transfer Protocol (MTP). The code opening files in usb_mtp_get_object and usb_mtp_get_partial_object and directories in usb_mtp_object_readdir doesn’t consider that the underlying filesystem may have changed since the time lstat(2) was called in usb_mtp_object_alloc, a classical TOCTTOU problem. An attacker with write access to the host filesystem shared with a guest can use this property to navigate the host filesystem in the context of the QEMU process and read any file the QEMU process has access to. Access to the filesystem may be local or via a network share protocol such as CIFS.

The post CVE-2018-16872 appeared first on CVE Vulnerability.

CVE-2018-0966

Sun, 26 Feb 2023 06:44:28 +0000

The post CVE-2018-0966 appeared first on CVE Vulnerability.

CVE-2020-9921

Sun, 26 Feb 2023 06:43:58 +0000

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.6. A malicious application may be able to execute arbitrary code with system privileges.

The post CVE-2020-9921 appeared first on CVE Vulnerability.

CVE-2020-9939

Sun, 26 Feb 2023 06:43:58 +0000

This issue was addressed with improved checks. This issue is fixed in macOS Catalina 10.15.6. A local user may be able to load unsigned kernel extensions.

The post CVE-2020-9939 appeared first on CVE Vulnerability.

CVE-2020-8890

Sun, 26 Feb 2023 06:43:34 +0000

An issue was discovered in MISP before 2.4.121. It mishandled time skew (between the machine hosting the web server and the machine hosting the database) when trying to block a brute-force series of invalid requests.

The post CVE-2020-8890 appeared first on CVE Vulnerability.