الرئيسية
الرئيسية
الاتجاهات
الاتجاهات
الثغرات
الثغرات
الأخبار
الأخبار
الباحثون
الباحثون
لماذا dbugs؟
لماذا dbugs؟
الإعدادات

Bryan Rhodes

#20344من 60,596
15.3إجمالي CVSS
الثغرات · 2
عالية
2
PT-2019-9974
2019-04-25
7.8
CVE-2018-20052
Cerner
Cerner Connectivity Engine
An issue was discovered where the user running the main CCE firmware has NOPASSWD sudo privileges to several utilities, which could be used to escalate privileges to root. For example, the command "sudo ln -s /tmp/script /etc/cron.hourly/script" could be utilized.
PT-2015-7490
2015-11-04
7.5
CVE-2015-7244
Mobatek
Mobaxterm
The default configuration of the server in MobaXterm has a disabled Access Control setting, which does not require authentication for X11 connections. This allows remote attackers to execute arbitrary commands or obtain sensitive information via X11 packets.