G Data EndpointProtection Enterprise version 17.08.2021 suffers from a privilege escalation vulnerability.
91647797876a97bb9dca13ac45f67ed97144cbf41673eefe91243c708bd68a49Securepoint SSL VPN Client version 2.0.30 suffers from a local privilege escalation vulnerability.
089fd391bbbeb7b8efda804fd0ad063d9c658488180ed9ca54ab3ba8f1db9424Rapid7 Windows InsightIDR Agent version 2.6.3.14 suffers from a local privilege escalation vulnerability.
fe8a41ad81aff53be73158b18e16605e1ccaa8755d4fbe6499d903dcd81c2f1fELBA5 Network Installation versions prior to 5.8.1 suffer from a remote code execution vulnerability.
2f87672da6e269f7bb6d0be7c8df2890794563b177a0b3ec39152e33c0cfe1e7Anti-Virus solutions are split into several different components (an unprivileged user mode part, a privileged user mode part and a kernel component). Logically the different systems talk to each other. By abusing NTFS directory junctions it is possible from the unprivileged user mode part ("the UI") to restore files from the virus quarantine with the permissions of the privileged user mode part ("Windows service"). This may results in a privileged file write vulnerability.
7e5e2eeec5863b5ec1f6f099ae65481e3ec78f2df7b81c96f35a7b5b269bbcd5VMware Horizon's macOS client versions prior to 4.5 suffer from a code injection vulnerability.
f66d718ae51d75bdcc8a8fa9026bde7c7516f85ea2777a8579d4c319165f6016Acunetix Web Vulnerability Scanner 11 suffers from multiple local privilege escalation vulnerabilities.
e74f87a5941a3a01b52ac4a134d5fc5786b156fcbaadebaa2320791bf4d68481A code injection through DLL sideloading vulnerability exists in 64-bit Oracle Java.
4f956101cdf5d276c874cea123fd4623f5a037012bdc72feb00042183a276e5dWineBottler versions 1.8-rc4 and below suffer from a man-in-the-middle vulnerability that can allow for remote code execution.
90bc884e71bd185168a3b8a5083b0eef421b07484c35ca0e1c107dd9c4919ae8ownCloud's desktop client versions up to 2.2.2 suffer from a local privilege escalation vulnerability.
b2623943c1aa93651044b4c1a58687459e6c32e5ec23cc3c6403bce318ee3b99KeePass 2's update check suffers from a man-in-the-middle vulnerability.
3ffce8ffcecf431af8017ab2207683659b2cf428b3fa6bac7f17d32917130f17Huawei Mobile Broadband HL Service versions 22.001.25.00.03 and below are vulnerable to a DLL side loading attack allowing normal unprivileged users to gain full SYSTEM access.
2563ce6275ba1108791f8d13204c1f460cd819b171ba0d2cbc4d69e26b85e5dd
© 2022 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed