Solaris 10 (x86) : 119060-73

X11 6.6.2x86: Xsun patch. Date this patch was last updated by Sun : Nov/04/19 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include"compat.inc"; if description scriptid130510; scriptversion"1.3"; scriptcvsdate"Date:...

CVE-2005-4890

creationtimestamp| type| source ---|---|--- 2019-11-04 22:31:13+00:00| seen| https://t.me/cibsecurity/7872 2024-02-04 07:36:57+00:00| seen| https://t.me/ctinow/178703 2026-05-22 15:01:30+00:00| seen| https://gist.github.com/raizen74/3404867c3b0257a1949ae189d7e97a7d...

CVE-2005-4890

There is a possible tty hijacking in shadow 4.x before 4.1.5 and sudo 1.x before 1.7.4 via "su - user -c program". The user session can be escaped to the parent session by using the TIOCSTI ioctl to push characters into the input buffer to be read by the next process...

CVE-2005-4890

The CVE-2005-4890 entry describes a local vulnerability where tty hijacking is possible in shadow 4.x (before 4.1.5) and sudo 1.x (before 1.7.4) via the command path "su - user -c program". Attacker can use the TIOCSTI ioctl to inject characters into the input buffer, allowing the user session to...

CVE-2005-2352

creationtimestamp| type| source ---|---|--- 2019-11-01 23:33:27+00:00| seen| https://t.me/cibsecurity/7852 2024-02-01 15:16:40+00:00| seen| https://t.me/ctinow/177607...

CVE-2005-2350

creationtimestamp| type| source ---|---|--- 2019-11-01 21:33:10+00:00| seen| https://t.me/cibsecurity/7848 2024-02-01 15:16:38+00:00| seen| https://t.me/ctinow/177605...

CVE-2005-2351

creationtimestamp| type| source ---|---|--- 2019-11-01 21:33:09+00:00| seen| https://t.me/cibsecurity/7847 2024-02-01 15:16:39+00:00| seen| https://t.me/ctinow/177606...

CVE-2005-2352

I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...

CVE-2005-2352

The CVE-2005-2352 entry maps to gs-gpl prior to version 8.56, where a race condition affects temporary file handling. According to CNVD/CVE context, the vulnerability arises from competing conditions during concurrent access to shared resources when the software operates in a networked environmen...

CVE-2005-2351

Vulnerable software: Mutt before 1.5.20 patch 7. The issue allows a denial-of-service by sending a series of requests to mutt temporary files. Root cause: access to or manipulation of temporary files used by Mutt. Remediation: upgrade to 1.5.20 patch 7 or newer where the fix is applied. Exploit s...

CVE-2005-2350

Cross-site scripting XSS vulnerability in websieve v0.62 allows remote attackers to inject arbitrary web script or HTML code in the web user interface...

CVE-2005-2350

CVE-2005-2350 affects websieve v0.62 and is a cross-site scripting (XSS) vulnerability in the web user interface. The root cause described in CNVD-2019-40085 notes lack of proper validation of client-side data by the web application, enabling an attacker to execute client-side code. The connected...

CVE-2005-3056

creationtimestamp| type| source ---|---|--- 2019-11-01 15:28:32+00:00| seen| https://t.me/cibsecurity/7831...

CVE-2005-3056

TWiki is affected by CVE-2005-3056 due to an arbitrary shell command execution flaw in the Include function. The vulnerability enables an attacker to execute commands on the server when TWiki processes Include, with network access, no authentication, and no user interaction required in the CVSS a...

CVE-2005-2349

creationtimestamp| type| source ---|---|--- 2019-10-28 17:26:43+00:00| seen| https://t.me/cibsecurity/7703 2024-01-29 10:11:50+00:00| seen| https://t.me/ctinow/175137...

CVE-2005-2349

Zoo 2.10 has Directory traversal...

CVE-2005-2349

CVE-2005-2349 affects Zoo 2.10 via a directory traversal vulnerability. The documents explicitly state the issue but do not provide root cause, affected components beyond Zoo 2.10, impact details, exploit status, or remediation.

CVE-2019-16370

The PGP signing plugin in Gradle before 6.0 relies on the SHA-1 algorithm, which might allow an attacker to replace an artifact with a different one that has the same SHA-1 message digest, a related issue to CVE-2005-4900...

CVE-2005-4791

Multiple untrusted search path vulnerabilities in SUSE Linux 10.0 cause the working directory to be added to LDLIBRARYPATH, which might allow local users to execute arbitrary code via 1 liferea or 2 banshee...

CVE-2019-16370

CVE-2019-16370 affects the PGP signing plugin for Gradle up to version 6.0. The root cause is reliance on SHA-1, enabling an attacker to replace an artifact with another having the same SHA-1 digest. This could permit spoofing/ tampering of artifacts. remediation: upgrade Gradle to 6.0 or later (...