15 matches found
CVE-2020-17400
This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...
CVE-2019-17400
creationtimestamp| type| source ---|---|--- 2024-01-17 13:41:09+00:00| seen| https://t.me/ctinow/169279...
Oracle Linux 7 : unoconv (ELSA-2020-3944)
The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2020-3944 advisory. 0.6-8 - Resolves: rhbz1803831 CVE-2019-17400 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...
NewStart CGSL CORE 5.05 / MAIN 5.05 : unoconv Vulnerability (NS-SA-2021-0170)
The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has unoconv packages installed that are affected by a vulnerability: - The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. CVE-2019-17400 Note that Nessus has not tested for...
NewStart CGSL CORE 5.04 / MAIN 5.04 : unoconv Vulnerability (NS-SA-2021-0043)
The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has unoconv packages installed that are affected by a vulnerability: - The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. CVE-2019-17400 Note that Nessus has not tested for...
CentOS 7 : unoconv (RHSA-2020:3944)
The remote CentOS Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3944 advisory. - The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion. CVE-2019-17400 Note that Nessus has not tested for th...
unoconv security update
0.6-8 - Resolves: rhbz1803831 CVE-2019-17400...
RHEL 7 : unoconv (RHSA-2020:3944)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2020:3944 advisory. Universal Office Converter unoconv is a command line tool to convert any document format that LibreOffice can import to any document format that...
Moderate: Red Hat Security Advisory: unoconv security update
An update for unoconv is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...
CVE-2020-17400
The CVE-2020-17400 entry concerns Parallels Desktop (vulnerable through the prl_hypervisor kext). A local attacker who can run low-privilege code can exploit an input-validation flaw that leads to a read past the end of an allocated buffer, enabling privilege escalation and code execution in the ...
CVE-2019-17400
The unoconv package before 0.9 mishandles untrusted pathnames, leading to SSRF and local file inclusion...
CVE-2019-17400
CVE-2019-17400 affects the Unoconv package. The vulnerability is caused by the unoconv component mishandling untrusted pathnames, which can lead to SSRF and local file inclusion. The public records in the connected documents show affected software as unoconv versions before 0.9, with remediation ...
Slack: SSRF via Office file thumbnails
On August 12, 2019, a group of researchers reported an exploit path for a vulnerability in LibreOffice. Slack uses LibreOffice to process certain file types for preview. A specially crafted file uploaded to Slack could permit local file access and expose an internal Slack AWS credential for the...
CVE-2018-17400
The PhonePe wallet (com.PhonePe.app) for Android versions 3.0.6–3.3.26 is documented to support potential Account Takeover via interception of the user name and PIN during initial configuration. Exploitation requires the user to install a malicious app and grant it accessibility permission; the A...
Fedora Update for thunderbird FEDORA-2011-17400
Check for the Version of thunderbird OpenVAS Vulnerability Test Fedora Update for thunderbird FEDORA-2011-17400 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it und...