59 matches found
CVE-2020-10751
The issue CVE-2020-10751 affects the Linux kernel SELinux LSM hook. It incorrectly validates only the first Netlink message in an skb, causing subsequent messages in the same skb to be granted permissions without further processing. This could enable bypass of SELinux netlink restrictions and, pe...
CVE-2020-10751
A flaw was found in the Linux kernels SELinux LSM hook implementation before version 5.7, where it incorrectly assumed that an skb would only contain a single netlink message. The hook would incorrectly only validate the first netlink message in the skb and allow or deny the rest of the messages...
Updated httpie packages fix security vulnerability
Updated httpie packages fix security vulnerability: HTTPie is vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his or her control...
Debian: Security Advisory (DLA-1937-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
[SECURITY] [DLA 1937-1] httpie security update
Package : httpie Version : 0.8.0-1+deb8u1 CVE ID : CVE-2019-10751 Debian Bug : 940058 An open redirect, that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a crafted URL pointing to a server in his o...
OPENSUSE-SU-2019:2089-1 Security update for httpie
This update for httpie fixes the following issues: httpie was updated to version 1.0.3: Fix CVE-2019-10751 HTTPie is vulnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP to a...
Security update for httpie (moderate)
openSUSE Security Update: Security update for httpie Announcement ID: openSUSE-SU-2019:2089-1 Rating: moderate References: 1148466 Cross-References: CVE-2019-10751 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available. Description: This update fo...
openSUSE Security Update : httpie (openSUSE-2019-2050)
This update for httpie fixes the following issues : httpie was updated to version 1.0.3 : - Fix CVE-2019-10751 HTTPie is volnerable to Open Redirect that allows an attacker to write an arbitrary file with supplied filename and content to the current directory, by redirecting a request from HTTP t...
Security update for httpie (moderate)
openSUSE Security Update: Security update for httpie Announcement ID: openSUSE-SU-2019:2050-1 Rating: moderate References: 1148466 Cross-References: CVE-2019-10751 Affected Products: openSUSE Leap 15.1 openSUSE Backports SLE-15-SP1 An update that fixes one vulnerability is now available...
CVE-2019-10751
CVE-2019-10751 affects HTTPie: Open Redirect vulnerability in all versions prior to 1.0.3 that allows an attacker to write an arbitrary file with supplied filename and content to the current directory by redirecting an HTTP request to a crafted URL under attacker control. Remediation: upgrade HTT...
CVE-2016-10751
creationtimestamp| type| source ---|---|--- 2019-05-24 18:48:32+00:00| seen| https://t.me/cvemitreorg/322 2019-05-24 22:26:24+00:00| seen| https://t.me/cibsecurity/4542...
CVE-2016-10751
osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&action=ajaxupload...
CVE-2016-10751
osClass 3.6.1 allows oc-admin/plugins.php Directory Traversal via the plugin parameter. This is exploitable for remote PHP code execution because an administrator can upload an image that contains PHP code in the EXIF data via index.php?page=ajax&action=ajaxupload...
CVE-2016-10751
osClass 3.6.1 contains a Directory Traversal in oc-admin/plugins.php via the plugin parameter, enabling remote PHP code execution by uploading a PHP-containing image through index.php?page=ajax&action=ajax_upload. Exploitation details are described in multiple sources; the root cause is improper ...
Samsung Galaxy S7 Edge: Overflow in OMACP WbXml String Extension Processing(CVE-2018-10751)
OMACP is a protocol supported by many mobile devices which allows them to receive provisioning information over the mobile network. One way to provision a device is via a WAP push SMS message containing provisioning information in WbXML. A malformed OMACP WAP push message can cause memory...
CVE-2018-10751
CVE-2018-10751 is a confirmed memory-corruption vulnerability in Samsung Galaxy S7 Edge caused by an integer overflow during processing of the OMACP WAP push payload’s String Extension in WbXml. A malformed OMACP WAP push can be delivered via SMS, triggering memory corruption pre-authentication a...
CVE-2018-10751
creationtimestamp| type| source ---|---|--- 2018-05-23 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/44724...
CVE-2017-10751
CVE-2017-10751 affects XnView Classic for Windows, version 2.40. A crafted .rle file may cause a denial of service and possibly other impact, related to data from a faulting address that controls branch selection starting at GDI32!GenericEngineGetGlyphs+0x0000000000000133. The available connected...
Fedora Core 10 FEDORA-2009-10751 (snort)
The remote host is missing an update to snort announced via advisory FEDORA-2009-10751. OpenVAS Vulnerability Test $Id: fcore200910751.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-10751 snort Authors: Thomas Reinke Copyright: Copyright c 2009...