https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 14:53:03 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-02675 bdu:2020-02675 https://cve.radiocsirt.org/vuln/bdu:2020-02675 https://cve.radiocsirt.org/vuln/certfr-2020-avi-219 certfr-2020-avi-219 https://cve.radiocsirt.org/vuln/certfr-2020-avi-219 https://cve.radiocsirt.org/vuln/cnvd-2018-06244 cnvd-2018-06244 https://cve.radiocsirt.org/vuln/cnvd-2018-06244 https://cve.radiocsirt.org/vuln/euvd-2026-61102 EUVD-2026-61102 https://cve.radiocsirt.org/vuln/euvd-2026-61102 https://cve.radiocsirt.org/vuln/fkie_cve-2018-1165 <p>This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMB_IOC_SVCENUM IOCTL. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4983.</p> <p>This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMB_IOC_SVCENUM IOCTL. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4983.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2018-1165 https://cve.radiocsirt.org/vuln/ghsa-26qq-h2w9-r3wv <p>This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMB_IOC_SVCENUM IOCTL. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4983.</p> <p>This vulnerability allows local attackers to escalate privileges on vulnerable installations of Joyent SmartOS release-20170803-20170803T064301Z. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the SMB_IOC_SVCENUM IOCTL. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a fixed-length, heap-based buffer. An attacker can leverage this vulnerability to execute code under the context of the host OS. Was ZDI-CAN-4983.</p> https://cve.radiocsirt.org/vuln/ghsa-26qq-h2w9-r3wv https://cve.radiocsirt.org/vuln/gsd-2018-1165 gsd-2018-1165 https://cve.radiocsirt.org/vuln/gsd-2018-1165