Page 200 of 5800 results (0.423 seconds)

CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0

03 Mar 2023 — An issue discovered in Shenzhen Zhiboton Electronics ZBT WE1626 Router v 21.06.18 allows attackers to escalate privileges via WGET command to the Network Diagnosis endpoint. • http://shenzhen.com • CWE-306: Missing Authentication for Critical Function •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

28 Feb 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-02-01 • CWE-667: Improper Locking •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 1

28 Feb 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://github.com/Ailenchick/CVE-2023-20945 • CWE-787: Out-of-bounds Write •

CVSS: 8.3EPSS: 0%CPEs: 6EXPL: 1

28 Feb 2023 — In certain environments where Sudo is configured with a rule that contains a CHROOT setting, a local attacker could use this issue to cause Sudo to crash, resulting in a denial of service, or possibly escalate privileges. • http://www.openwall.com/lists/oss-security/2023/03/01/8 • CWE-415: Double Free •

CVSS: 6.7EPSS: 0%CPEs: 3EXPL: 0

28 Feb 2023 — This could lead to local escalation of privilege with System execution privileges needed. • https://source.android.com/security/bulletin/2023-02-01 •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 3

28 Feb 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://packetstorm.news/files/id/171239 • CWE-416: Use After Free •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 2

28 Feb 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://github.com/Trinadh465/frameworks_av_CVE-2023-20933 • CWE-416: Use After Free •

CVSS: 7.8EPSS: 0%CPEs: 3EXPL: 0

28 Feb 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-02-01 •

CVSS: 7.8EPSS: 0%CPEs: 5EXPL: 2

28 Feb 2023 — In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. • https://github.com/Trinadh465/frameworks_base_CVE-2023-20943 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •

CVSS: 7.8EPSS: 0%CPEs: 1EXPL: 0

28 Feb 2023 — This could lead to local escalation of privilege with no additional execution privileges needed. • https://source.android.com/security/bulletin/2023-02-01 • CWE-347: Improper Verification of Cryptographic Signature •