CVE-2020-2027

PAN-OS contains a buffer overflow in the authd component of the management server that can be triggered by authenticated administrators to disrupt system processes and potentially execute arbitrary code with root privileges. Affected versions include PAN-OS 7.1 and 8.0 in general; PAN-OS 8.1 befo...

RHEL 8 : OpenShift Container Platform 4.2.33 openshift-clients (RHSA-2020:2027)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2027 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or private cloud...

Debian: Security Advisory (DLA-2027-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-2027

CVE-2019-2027 affects Android’s Media framework. The vulnerability is a floor0_inverse1 out-of-bounds write in floor0.c caused by an incorrect bounds check, leading to remote code execution. Exploitation requires user interaction, and impact is rated high (RCE) across Android 7.0 through 9 in the...

CVE-2017-2027

...

CVE-2017-2027

CVE-2017-2027 entry is rejected/not used; this candidate was in CNA pool and not assigned to issues.

CVE-2016-2027

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2026...

CVE-2016-2026

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2027...

Design/Logic Flaw

HPE Matrix Operating Environment before 7.5.1 allows remote attackers to obtain sensitive information via unspecified vectors, a different vulnerability than CVE-2016-2027...

CVE-2016-2027

CVE-2016-2027 concerns HPE Matrix Operating Environment prior to 7.5.1, where a remote attacker can obtain sensitive information via unspecified vectors. The connected records identify the affected product and that this is a different vulnerability from CVE-2016-2026, but they do not specify root...

Oracle: Security Advisory (ELSA-2009-1471)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-2027

IBM WebSphere eXtreme Scale 7.1.0 (before 7.1.0.3) and 7.1.1 (before 7.1.1.1) is affected by a logout handling flaw that permits a local attacker to bypass access controls by leveraging an unattended workstation. The issue stems from improper logout actions within the eXtreme Scale component, ena...

CVE-2014-2027

eGroupware before 1.8.006.20140217 allows remote attackers to conduct PHP object injection attacks, delete arbitrary files, and possibly execute arbitrary code via the 1 addrfields or 2 trans parameter to addressbook/csvimport.php, 3 calfields or 4 trans parameter to calendar/csvimport.php, 5...

CVE-2014-2027

CVE-2014-2027 affects eGroupware prior to 1.8.006.20140217. The issue arises from improper input handling allowing PHP object injection and potential remote code execution via multiple parameters across addressbook/csv_import.php, calendar/csv_import.php, csv_import.php (in projectmanager/ or inf...

Mandriva Linux Security Advisory : jython (MDVSA-2015:158)

Updated jython packages fix security vulnerability : There are serveral problems with the way Jython creates class cache files, potentially leading to arbitrary code execution or information disclosure CVE-2013-2027. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

MGASA-2015-0096 Updated jython packages fix CVE-2013-2027

Updated jython packages fix security vulnerability: There are serveral problems with the way Jython creates class cache files, potentially leading to arbitrary code execution or information disclosure CVE-2013-2027...

CVE-2013-2027

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors...

CVE-2013-2027

CVE-2013-2027 affects Jython 2.2.1, where class cache files are created with permissions from the current umask, allowing local attackers to bypass access restrictions. The IBM advisory notes potential arbitrary code execution or information disclosure and recommends upgrading to jython-standalon...

CVE-2013-2027

Jython 2.2.1 uses the current umask to set the privileges of the class cache files, which allows local users to bypass intended access restrictions via unspecified vectors...

openSUSE Security Update : jython (openSUSE-2015-139)

jython was updated to fix one security issue. This security issue was fixed : - CVE-2013-2027: Creates executables class files with wrong permissions %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...