Lucene search
K

15 matches found

RedhatCVE
RedhatCVE
added 2025/02/05 1:22 p.m.7 views

CVE-2020-17400

This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

8.8CVSS6.6AI score0.00099EPSS
Exploits0References4
Circl
Circl
added 2024/01/17 1:41 p.m.2 views

CVE-2019-17400

creationtimestamp| type| source ---|---|--- 2024-01-17 13:41:09+00:00| seen| https://t.me/ctinow/169279...

7.5CVSS7.2AI score0.00438EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2023/09/07 12:0 a.m.12 views

Oracle Linux 7 : unoconv (ELSA-2020-3944)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-3944 advisory. 0.6-8 - Resolves: rhbz1803831 CVE-2019-17400 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

7.5CVSS7.3AI score0.00438EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2021/10/27 12:0 a.m.22 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : unoconv Vulnerability (NS-SA-2021-0170)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has unoconv packages installed that are affected by a vulnerability: - The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. CVE-2019-17400 Note that Nessus has not tested for...

7.5CVSS7.3AI score0.00438EPSS
Exploits1References3
Tenable Nessus
Tenable Nessus
added 2021/03/10 12:0 a.m.17 views

NewStart CGSL CORE 5.04 / MAIN 5.04 : unoconv Vulnerability (NS-SA-2021-0043)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has unoconv packages installed that are affected by a vulnerability: - The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. CVE-2019-17400 Note that Nessus has not tested for...

7.5CVSS7.3AI score0.00438EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2020/10/20 12:0 a.m.19 views

CentOS 7 : unoconv (RHSA-2020:3944)

The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3944 advisory. - The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. CVE-2019-17400 Note that Nessus has not tested for th...

7.5CVSS7.3AI score0.00438EPSS
Exploits1References2
Oracle linux
Oracle linux
added 2020/10/06 12:0 a.m.21 views

unoconv security update

0.6-8 - Resolves: rhbz1803831 CVE-2019-17400...

7.5CVSS1.5AI score0.00438EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2020/09/30 12:0 a.m.18 views

RHEL 7 : unoconv (RHSA-2020:3944)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3944 advisory. Universal Office Converter unoconv is a command line tool to convert any document format that LibreOffice can import to any document format that...

7.5CVSS7.2AI score0.00438EPSS
Exploits1References6
RedHat Linux
RedHat Linux
added 2020/09/29 9:7 p.m.33 views

Moderate: Red Hat Security Advisory: unoconv security update

An update for unoconv is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

7.5CVSS7.1AI score0.00438EPSS
Exploits1References3
CVE
CVE
added 2020/08/25 8:20 p.m.54 views

CVE-2020-17400

The CVE-2020-17400 entry concerns Parallels Desktop (vulnerable through the prl_hypervisor kext). A local attacker who can run low-privilege code can exploit an input-validation flaw that leads to a read past the end of an allocated buffer, enabling privilege escalation and code execution in the ...

8.8CVSS8.6AI score0.00099EPSS
Exploits0References2Affected Software1
RedhatCVE
RedhatCVE
added 2019/10/24 7:21 a.m.13 views

CVE-2019-17400

The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion...

7.5CVSS2.6AI score0.00438EPSS
Exploits1References3
CVE
CVE
added 2019/10/21 10:6 p.m.228 views

CVE-2019-17400

CVE-2019-17400 affects the Unoconv package. The vulnerability is caused by the unoconv component mishandling untrusted pathnames, which can lead to SSRF and local file inclusion. The public records in the connected documents show affected software as unoconv versions before 0.9, with remediation ...

7.5CVSS7.2AI score0.00438EPSS
Exploits1References2Affected Software1
Hacker One
Hacker One
added 2019/08/12 9:58 p.m.16 views

Slack: SSRF via Office file thumbnails

On August 12, 2019, a group of researchers reported an exploit path for a vulnerability in LibreOffice. Slack uses LibreOffice to process certain file types for preview. A specially crafted file uploaded to Slack could permit local file access and expose an internal Slack AWS credential for the...

5CVSS2.7AI score0.00438EPSS
Exploits1
CVE
CVE
added 2018/09/23 10:0 p.m.42 views

CVE-2018-17400

The PhonePe wallet (com.PhonePe.app) for Android versions 3.0.6–3.3.26 is documented to support potential Account Takeover via interception of the user name and PIN during initial configuration. Exploitation requires the user to install a malicious app and grant it accessibility permission; the A...

7CVSS6.8AI score0.00063EPSS
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2012/04/02 12:0 a.m.17 views

Fedora Update for thunderbird FEDORA-2011-17400

Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2011-17400 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...

4.3CVSS7.9AI score0.03832EPSS
Exploits4References2
Rows per page
Query Builder