807 matches found
UBUNTU-CVE-2019-12928
The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed as a...
PT-2019-13028 · Qemu +2 · Qemu +2
Name of the Vulnerable Software and Affected Versions: QEMU versions 4.0.0 and earlier Description: The QMP migrate command in QEMU is vulnerable to OS command injection, allowing a remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP...
CVE-2019-12928: Improper Neutralization of Special Elements used in an OS Command
The QMP migrate command in QEMU version 4.0.0 and earlier is vulnerable to OS command injection, which allows the remote attacker to achieve code execution, denial of service, or information disclosure by sending a crafted QMP command to the listening server. Note: This has been disputed as a...
kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message
The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...
kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message
The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...
GHSA-38H8-X697-GH8Q Tmp files readable by other users in sync-exec
Affected versions of sync-exec use files located in /tmp/ to buffer command results before returning values. As /tmp/ is almost always set with world readable permissions, this may allow low privilege users on the system to read the results of commands run via sync-exec under a higher privilege...
CVE-2018-16409
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...
Server side request forgery (ssrf)
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...
CVE-2018-16409
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...
CVE-2018-16409
CVE-2018-16409 affects Gogs 0.11.53. The vulnerability allows an attacker to use the migrate function to send arbitrary HTTP GET requests, causing SSRF. Reported impact per NVD includes a CVSS3 base score of 8.6 (HIGH) with network attack vector and no user interaction required; SIEM/mitigation g...
CVE-2018-16409: Server-Side Request Forgery (SSRF)
In Gogs 0.11.53, an attacker can use migrate to send arbitrary HTTP GET requests, leading to SSRF...
PT-2018-13551
Name of the Vulnerable Software and Affected Versions Gogs version 0.11.53 Description The issue allows an attacker to send arbitrary HTTP GET requests, leading to Server-Side Request Forgery SSRF. This can be achieved by utilizing the migrate functionality. Recommendations For Gogs version...
Fedora Update for drupal7-backup_migrate FEDORA-2018-d257909403
The remote host is missing an update for the SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] Fedora 28 Update: drupal7-backup_migrate-3.5-1.fc28
Back up and restore your Drupal MySQL database, code, and files or migrate a site between environments. Backup and Migrate supports gzip, bzip and zip compression as well as automatic scheduled backups. With Backup and Migrate you can dump some or all of your database tables to a file download or...
kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message
The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...
kernel: Out-of-bounds access via an XFRM_MSG_MIGRATE xfrm Netlink message
The xfrmmigrate function in the net/xfrm/xfrmpolicy.c file in the Linux kernel built with CONFIGXFRMMIGRATE does not verify if the dir parameter is less than XFRMPOLICYMAX. This allows a local attacker to cause a denial of service out-of-bounds access or possibly have unspecified other impact by...
Siemens SCALANCE X Switches, RUGGEDCOM WiMAX, RFID 181-EIP, and SIMATIC RF182C (Update D)
1. EXECUTIVE SUMMARY CVSS v3 7.5 ATTENTION: Exploitable from the same local network segment OSI Layer 2 Vendor: Siemens Equipment: SCALANCE X switches, RUGGEDCOM Win, RFID 181-EIP, and SIMATIC RF182C Vulnerability: Heap-based Buffer Overflow 2. UPDATE INFORMATION This updated advisory is a...
Backup and Migrate - Critical - Arbitrary PHP code execution - SA-CONTRIB-2018-004
This module enables you to create manual and scheduled backups of a site, and restore the site from backup. The module doesn't sufficiently identify that its custom permissions are risky and should only be granted to highly trusted roles. Sites using this module should review the permissions page...
AWStats Path Traversal Vulnerability
AWStats is an extremely popular web-based website traffic analyzer. A path traversal vulnerability exists in the handling of the 'config' and 'migrate' parameters in AWStats 7.6 and earlier versions. A remote attacker can exploit this vulnerability to execute code...