CVE-2015-9284

The request phase of the OmniAuth Ruby gem 1.9.1 and earlier is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able ...

CVE-2015-9284

The request phase of the OmniAuth Ruby gem 1.9.1 and earlier is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able ...

CVE-2015-9284

The request phase of the OmniAuth Ruby gem 1.9.1 and earlier is vulnerable to Cross-Site Request Forgery when used as part of the Ruby on Rails framework, allowing accounts to be connected without user intent, user interaction, or feedback to the user. This permits a secondary account to be able ...

CVE-2015-9284

CVE-2015-9284 describes a CSRF vulnerability in the OAuth/OmniAuth request phase for the Ruby gem (1.9.1 and earlier) used with Rails. The issue allows a malicious actor to connect a secondary account without user intent, enabling sign-in as the user’s primary account. Affected component: OmniAut...

CVE-2015-1326

creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:44+00:00| seen| https://t.me/cibsecurity/3858...

CVE-2015-1327

creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:43+00:00| seen| https://t.me/cibsecurity/3857...

CVE-2015-1341

creationtimestamp| type| source ---|---|--- 2019-04-22 20:30:40+00:00| seen| https://t.me/cibsecurity/3855 2019-04-29 18:27:21+00:00| seen| https://t.me/cibsecurity/3995...

CVE-2015-1343

All versions of unity-scope-gdrive logs search terms to syslog...

UBUNTU-CVE-2015-1343

All versions of unity-scope-gdrive logs search terms to syslog...

CVE-2015-1320

The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affects Ubuntu MAAS versions prior to 1.9.2...

CVE-2015-1340

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...

UBUNTU-CVE-2015-1316

Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key...

CVE-2015-1326 python-dbusmock arbitrary code execution or file overwrite when templates are loaded from /tmp

python-dbusmock before version 0.15.1 AddTemplate D-Bus method call or DBusTestCase.spawnservertemplate method could be tricked into executing malicious code if an attacker supplies a .pyc file...

CVE-2015-1327

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 is vulnerable to an information disclosure via DBUS API where a confined app passes a file path and a malicious actor could cause a transfer of file:///etc/passwd to another app. Root cause: the DBUS API does not require the confined app to...

CVE-2015-1327 Content-hub DBUS API doesn't prevent confined apps from passing paths to files without access

Content Hub before version 0.0+15.04.20150331-0ubuntu1.0 DBUS API only requires a file path for a content item, it doesn't actually require the confined app have access to the file to create a transfer. This could allow a malicious application using the DBUS API to export file:///etc/passwd which...

CVE-2015-1343 unity-scope-gdrive search feature logs search terms to syslog

All versions of unity-scope-gdrive logs search terms to syslog...

CVE-2015-1341

Summary (CVE-2015-1341) : The Ubuntu/apport vulnerability allows a local attacker to escalate privileges by abusing Python module imports. Specifically, if the triggering process runs Python with the first argument -m and triggers a coredump, any Python module on sys.path could be imported by App...

CVE-2015-1340

CVE-2015-1340 describes a TOCTOU race in LXD’s container path handling: an unsafe chmod in doUidshiftIntoContainer() that races with Filepath.Walk(), allowing a symlink created in the window to let an attacker set arbitrary file modes. Affected: LXD prior to 0.19-0ubuntu5. Impact: potential modif...

CVE-2015-1340 chmod race in doUidshiftIntoContainer

LXD before version 0.19-0ubuntu5 doUidshiftIntoContainer has an unsafe Chmod call that races against the stat in the Filepath.Walk function. A symbolic link created in that window could cause any file on the system to have any mode of the attacker's choice...

CVE-2015-1341 Apport privilege escalation through Python module imports

Any Python module in sys.path can be imported if the command line of the process triggering the coredump is Python and the first argument is -m in Apport before 2.19.2 function pythonmodulepath...