CVE-2019-3807: Insufficient Verification of Data Authenticity

An issue has been found in PowerDNS Recursor versions 4.1.x before 4.1.9 where records in the answer section of responses received from authoritative servers with the AA flag not set were not properly validated, allowing an attacker to bypass DNSSEC validation...

[ASA-201901-13] powerdns-recursor: multiple issues

Arch Linux Security Advisory ASA-201901-13 ========================================== Severity: Medium Date : 2019-01-24 CVE-ID : CVE-2019-3806 CVE-2019-3807 Package : powerdns-recursor Type : multiple issues Remote : Yes Link : https://security.archlinux.org/AVG-856 Summary ======= The package...

PT-2018-13547

Name of the Vulnerable Software and Affected Versions Twistlock AuthZ Broker version 0.1 Description The issue concerns the mishandling of regular expressions, which can be exploited to bypass policies. For example, the API endpoint "containers/aa/pause?aaa=/start" can be used to bypass a policy...

PT-2017-14110

Name of the Vulnerable Software and Affected Versions PHPSUGAR PHP Melody versions prior to 2.7.3 Description The issue exists due to SQL Injection via an aa pages per page cookie in a playlist action to "watch.php". Recommendations For versions prior to 2.7.3, update to version 2.7.3 or later to...

debian/tor.init Tor Bypass

The vulnerability of the debian/tor.init script in the Debian software for anonymous information exchange, Tor, is related to access control deficiencies. This script was designed to execute aa-exec from the standard system path, provided the AppArmor package is installed. Exploiting this...

DEBIAN-CVE-2017-11565

debian/tor.init in the Debian tor0.2.9.11-1deb9u1 package for Tor was designed to execute aa-exec from the standard system pathname if the apparmor package is installed, but implements this incorrectly with a wrong assumption that the specific pathname would remain the same forever, which allows...

CVE-2017-11565

debian/tor.init in the Debian tor0.2.9.11-1deb9u1 package for Tor was designed to execute aa-exec from the standard system pathname if the apparmor package is installed, but implements this incorrectly with a wrong assumption that the specific pathname would remain the same forever, which allows...

PT-2017-2588

Name of the Vulnerable Software and Affected Versions Tor version 0.2.9.11-1deb9u1 Description The issue is related to the debian/tor.init script in the Tor package, which was designed to execute aa-exec from the standard system pathname if the apparmor package is installed. However, the script...

openSUSE Security Update : apparmor (openSUSE-2017-452)

This update for apparmor fixes the following issues : These security issues were fixed : - CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service lp1668892, boo1029696 - boo1017260: Migration to apparmor.service accidentally disable AppArmor. Note: This will re-enable AppArmor i...

Security update for apparmor (important)

This update for apparmor fixes the following issues: These security issues were fixed: - CVE-2017-6507: Preserve unknown profiles when reloading apparmor.service lp1668892, boo1029696 - boo1017260: Migration to apparmor.service accidently disable AppArmor. Note: This will re-enable AppArmor if it...

AA game - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AA game published at the 'play' market has multiple vulnerabilities...

aa 2 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application aa 2 published at the 'play' market has multiple vulnerabilities...

Tic Tac Toe AA - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Tic Tac Toe AA published at the 'play' market has multiple vulnerabilities...

Gentoo Linux Data Compromise

The vulnerability of the aa-sources package up to version 2.6.5-r5 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

Gentoo Linux Data Compromise

The vulnerability of the aa-sources package up to version 2.6.5-r5 of the Gentoo Linux operating system can lead to a violation of the confidentiality of protected information. This vulnerability can be exploited locally...

Gentoo Linux Data Compromise

The multiple vulnerabilities in the aa-sources package up to version 2.4.23-r2 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. These vulnerabilities can be exploited locally...

Gentoo Linux Data Compromise

The vulnerability of the aa-sources package up to version 2.4.23-r1 of the Gentoo Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...

AA SMTP Server 1.1 - Crash PoC

No description provided by source. ========================= AA SMTP SERVER v.1.1 -- Crash POC ========================= Application : AA SMTP SERVER v.1.1 Vendor URL : http://www.aa2soft.com/download.htm Category : Windows/POC/Crash Author : ..:: SONiC ::.. aka theM4LW4r3 sonicdefenceatgmail.com...

kernel: drm/radeon/kms: check AA resolve registers on r300

The Radeon GPU drivers in the Linux kernel before 2.6.38-rc5 do not properly validate data related to the AA resolve registers, which allows local users to write to arbitrary memory locations associated with 1 Video RAM aka VRAM or 2 the Graphics Translation Table GTT via crafted values...

CVE-2011-1016

CVE-2011-1016 concerns the Linux kernel Radeon GPU drivers and their DRM subsystem. The affected component is the Radeon GPU driver (radeon/kms) in kernels before 2.6.38-rc5, where data related to the AA resolve registers was not properly validated. This could allow a local user to write to arbit...