3224 matches found
sqlite (>=0.19.7, <=0.21.1), sqlite3-sys (>=0.6.7, <=0.9.2) +3 more potentially affected by unknown CVE via temporary (0.5.1)
temporary CARGO version 0.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on temporary and may be impacted: - sqlite =0.19.7, =0.6.7, =0.11.0, =0.2.6, =0.2.7 Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2018-0022...
PT-2021-9175
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.18.0-193.el8 Description A memory disclosure flaw was found in the Linux kernel's sysctl subsystem when reading the /proc/sys/kernel/rh features file. This flaw allows a local user to read uninitialized values...
WAF Buster - Disrupt WAF By Abusing SSL/TLS Ciphers
Disrupt WAF by abusing SSL/TLS Ciphers About WAFbuster This tool was created to Analyze the ciphers that are supported by the Web application firewall being used at the web server end. Reference: https://0x09al.github.io/waf/bypass/ssl/2018/07/02/web-application-firewall-bypass.html It works by...
DEBIAN-CVE-2018-6556
lxc-user-nic when asked to delete a network interface will unconditionally open a user provided path. This code path may be used by an unprivileged user to check for the existence of a path which they wouldn't otherwise be able to reach. It may also be used to trigger side effects by causing a...
Cisco AnyConnect Secure Mobility Client for Windows Desktop Input Validation Vulnerability
Cisco AnyConnect Secure Mobility Client for Windows Desktop is a secure mobility client for the Windows platform from Cisco that provides secure access to networks and applications from any device. An input validation vulnerability exists in the vpnva-6.sys file and the vpnva64-6.sys file in Cisc...
file: Denial of service
Background file is a utility that guesses a file format by scanning binary data for patterns. Description File does not properly utilize the docorenote function in readelf.c in libmagic.a. Impact A remote attacker could send a specially crafted ELF file possibly resulting in a Denial of Service...
CVE-2018-0373
CVE-2018-0373 affects Cisco AnyConnect Secure Mobility Client for Windows Desktop, specifically vpnva-6.sys (32-bit) and vpnva64-6.sys (64-bit). A local, authenticated attacker can exploit improper validation of user-supplied data to cause a Denial of Service on the affected system. The vulnerabi...
CVE-2018-0373: Improper Input Validation
A vulnerability in vpnva-6.sys for 32-bit Windows and vpnva64-6.sys for 64-bit Windows of Cisco AnyConnect Secure Mobility Client for Windows Desktop could allow an authenticated, local attacker to cause a denial of service DoS condition on an affected system. The vulnerability is due to improper...
Security Bulletin: A security vulnerability has been identified in WebSphere Application Server shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise (CVE-2016-8934)
Summary There is a security vulnerability in WebSphere Application Server, IBM Business Process Manager, and IBM Tivoli System Automation Application Manager that is shipped with IBM Cloud Orchestrator and Cloud Orchestrator Enterprise. Additionally, the vulnerability affects Jazz™ for Service...
Security Bulletin: Open Source GNU glibc Vulnerabilities which is used by IBM OS Images for RedHat Linux in IBM PureApplication Systems (CVE-2017-1000366)
Summary There are vulnerabilities in the Open Source GNU glibc that is used by the OS Images for IBM PureApplication Software Suite, IBM Bluemix Local System and IBM PureApplication System/Software Vulnerability Details CVEID: CVE-2017-1000366 DESCRIPTION: Glibc could allow a local attacker to...
procps: Multiple vulnerabilities
Background A bunch of small useful utilities that give information about processes using the /proc filesystem. Description Multiple vulnerabilities have been discovered in procps. Please review the CVE identifiers referenced below for details. Impact A local attacker could execute arbitrary code,...
CVE-2018-11527: Cross-Site Request Forgery (CSRF)
An issue was discovered in CScms v4.1. A Cross-site request forgery CSRF vulnerability in plugins/sys/admin/Sys.php allows remote attackers to change the administrator's username and password via /admin.php/sys/editpasssave...
PT-2018-10639
Name of the Vulnerable Software and Affected Versions CScms version 4.1 Description A Cross-site request forgery CSRF issue allows remote attackers to change the administrator's username and password via the "admin.php/sys/editpass save" API endpoint. Recommendations For CScms version 4.1, as a...
Shadow: security bypass
Background Shadow is a set of tools to deal with user accounts. Description A local attacker could possibly bypass security restrictions if an administrator used “group blacklisting” to restrict access to file system paths. Impact A local attacker could possibly bypass security restrictions...
SUSE-SU-2018:1007-1 Security update for the Linux Kernel (Live Patch 13 for SLE 12 SP2)
This update for the Linux Kernel 4.4.74-9238 fixes several issues. The following security issues were fixed: - CVE-2017-13166: Prevent elevation of privilege vulnerability in the v4l2 video driver bsc1085447. - CVE-2018-1068: A flaw in the implementation of 32-bit syscall interface for bridging...
ncurses: Multiple vulnerabilities
Background Free software emulation of curses in System V. Description Multiple vulnerabilities have been discovered in ncurses. Please review the CVE identifiers referenced below for details. Impact A remote attacker, by enticing the user to process untrusted terminfo or other data, could execute...
Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08676)
Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A denial of service vulnerability exists in windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0. An attacker can exploit this vulnerability to cause a denial of service blue screen of dea...
Jungo DriverWizard WinDriver Denial of Service Vulnerability (CNVD-2018-08677)
Jungo DriverWizard WinDriver is a PCI/USB device driver development tool from Israel's Jungo Connectivity. A denial of service vulnerability exists in windrvr1260.sys in Jungo DriverWizard WinDriver 12.6.0. An attacker can exploit this vulnerability to cause a denial of service blue screen of dea...
