Lucene search
+L

106 matches found

OpenVAS
OpenVAS
added 2015/04/01 12:0 a.m.15 views

CentOS Update for setroubleshoot CESA-2015:0729 centos7

Check the version of setroubleshoot SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882141";...

10CVSS5.1AI score0.16335EPSS
SaveExploits2References2
UbuntuCve
UbuntuCve
added 2015/03/30 2:59 p.m.27 views

CVE-2015-1815

The getrpmnvrbyfilepathtemporary function in util.py in setroubleshoot before 3.2.22 allows remote attackers to execute arbitrary commands via shell metacharacters in a file name...

10CVSS6AI score0.16335EPSS
SaveExploits2References3
CVE
CVE
added 2015/03/30 2:0 p.m.95 views

CVE-2015-1815

Summary: CVE-2015-1815 affects setroubleshoot’s get_rpm_nvr_by_file_path_temporary in util.py, where shells metacharacters in a file name can lead to remote command execution. Concrete details from connected advisories show affected packages across distros (e.g., Fedora setroubleshoot 3.2.x, Mira...

10CVSS7.4AI score0.16335EPSS
SaveExploits2References11Affected Software1
Tenable Nessus
Tenable Nessus
added 2015/03/27 12:0 a.m.15 views

Scientific Linux Security Update : setroubleshoot on SL5.x, SL6.x, SL7.x i386/x86_64 (20150326)

It was found that setroubleshoot did not sanitize file names supplied in a shell command look-up for RPMs associated with access violation reports. An attacker could use this flaw to escalate their privileges on the system by supplying a specially crafted file to the underlying shell command...

10CVSS5.4AI score0.16335EPSS
SaveExploits2References2
OpenVAS
OpenVAS
added 2015/03/27 12:0 a.m.18 views

RedHat Update for setroubleshoot RHSA-2015:0729-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

10CVSS6.5AI score0.16335EPSS
SaveExploits2References2
Check Point Advisories
Check Point Advisories
added 2014/11/10 12:0 a.m.8 views

XOOPS Module Library Remote SQL Injection (CVE-2007-1815)

An SQL injection vulnerability has been reported in Xoops Library Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...

7.5CVSS5.2AI score0.0105EPSS
SaveExploits1
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.29 views

Hummingbird Connectivity 10 SP5 LPD Buffer Overflow

No description provided by source. $Id: hummingbirdexceed.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms ...

7.1AI score
SaveExploits0
Cvelist
Cvelist
added 2014/05/14 10:0 a.m.28 views

CVE-2014-0310

Microsoft Internet Explorer 6 through 11 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted web site, aka "Internet Explorer Memory Corruption Vulnerability," a different vulnerability than CVE-2014-1815...

7.5AI score0.17351EPSS
SaveExploits0References1
CVE
CVE
added 2014/05/14 10:0 a.m.68 views

CVE-2014-1815

CVE-2014-1815 concerns memory corruption in Microsoft Internet Explorer versions 6–11 triggered by visiting a crafted web site. The connected documents confirm IE as the affected product and cite a memory-corruption vulnerability that could allow remote code execution or memory corruption-based d...

9.3CVSS7.5AI score0.20263EPSS
SaveExploits3References1Affected Software1
Check Point Advisories
Check Point Advisories
added 2014/05/13 12:0 a.m.19 views

Microsoft Internet Explorer Memory Corruption (MS14-029: CVE-2014-1815)

A remote code execution vulnerability has been reported in Microsoft Internet Explorer. The vulnerability is due to an error in the way that Internet Explorer accesses an object that has not been correctly initialized or has been deleted. A remote attacker can exploit this issue by enticing a use...

9.3CVSS7AI score0.20263EPSS
SaveExploits3
OpenVAS
OpenVAS
added 2013/06/14 12:0 a.m.50 views

Ubuntu Update for linux USN-1815-1

Check for the Version of linux OpenVAS Vulnerability Test $Id: gbubuntuUSN18151.nasl 8650 2018-02-03 12:16:59Z teissa $ Ubuntu Update for linux USN-1815-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; y...

6.9CVSS6.7AI score0.01255EPSS
SaveExploits3References2
OpenVAS
OpenVAS
added 2013/06/14 12:0 a.m.41 views

Ubuntu: Security Advisory (USN-1815-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS5.8AI score0.01255EPSS
SaveExploits3References2
Tenable Nessus
Tenable Nessus
added 2013/05/03 12:0 a.m.50 views

Ubuntu 13.04 : linux vulnerabilities (USN-1815-1)

Andy Lutomirski discover an error in the Linux kernel's credential handling on unix sockets. A local user could exploit this flaw to gain administrative privileges. CVE-2013-1979 Andy Lutomirski discovered a privilege escalation in the Linux kernel's user namespaces. A local user could exploit th...

6.9CVSS6.6AI score0.01255EPSS
SaveExploits3References3
RedHat Linux
RedHat Linux
added 2013/03/21 6:13 p.m.34 views

Moderate: Red Hat Security Advisory: openstack-packstack security and bug fix update

An updated openstack-packstack package that fixes one security issue and several bugs is now available for Red Hat OpenStack Folsom. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base score, which gives a...

6.1CVSS5.8AI score0.00455EPSS
SaveExploits1References29
Tenable Nessus
Tenable Nessus
added 2012/08/01 12:0 a.m.41 views

Scientific Linux Security Update : webkitgtk on SL6.x i386/x86_64

Multiple memory corruption flaws were found in WebKit. Malicious web content could cause an application using WebKitGTK+ to crash or, potentially, execute arbitrary code with the privileges of the user running the application. CVE-2010-1782, CVE-2010-1783, CVE-2010-1784, CVE-2010-1785,...

10CVSS8AI score0.61319EPSS
SaveExploits24References31
CVE
CVE
added 2012/06/08 6:0 p.m.58 views

CVE-2012-1815

CVE-2012-1815 affects Emerson DeltaV DeltaV Workstations (V9.3.1, V10.3.1, V11.3, V11.3.1) and DeltaV ProEssentials Scientific Graph 5.0.0.6. The vulnerability is described as a SQL injection that allows remote attackers to execute arbitrary SQL commands via unspecified vectors. The NVD entry lis...

7.5CVSS8.6AI score0.01511EPSS
SaveExploits0References4Affected Software3
Cvelist
Cvelist
added 2012/06/08 6:0 p.m.25 views

CVE-2012-1815

SQL injection vulnerability in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

8.3AI score0.01511EPSS
SaveExploits0References4
CVE
CVE
added 2011/06/09 7:0 p.m.54 views

CVE-2011-1815

CVE-2011-1815 affects Google Chrome (pre-12.0.742.91). The vulnerability allows remote attackers to inject script into a tab page via vectors related to extensions, specifically extension script injection into new tab page. The issue is tied to Chrome’s extension framework and is mitigated by upd...

4.3CVSS6AI score0.01153EPSS
SaveExploits0References7Affected Software1
Debian CVE
Debian CVE
added 2011/06/09 7:0 p.m.30 views

CVE-2011-1815

Removed by vendor...

4.3CVSS6.7AI score0.01153EPSS
SaveExploits0
OpenVAS
OpenVAS
added 2011/01/11 12:0 a.m.49 views

Fedora Update for webkitgtk FEDORA-2011-0121

Check for the Version of webkitgtk OpenVAS Vulnerability Test Fedora Update for webkitgtk FEDORA-2011-0121 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under th...

10CVSS0.4AI score0.61319EPSS
SaveExploits32References2
Rows per page
Query Builder