219 matches found
CVE-2020-8811
CVE-2020-8811 affects Bludit 3.10.0. The vulnerability lies in ajax/profile-picture-upload.php, where an authenticated user can change other users' profile pictures. This is the stated impact; no remediation details are provided in the connected documents. CVSS metrics in the initial record indic...
CVE-2020-8811
ajax/profile-picture-upload.php in Bludit 3.10.0 allows authenticated users to change other users' profile pictures...
Huawei EulerOS: Security Advisory for kernel (EulerOS-SA-2016-1007)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Kernel update: Virtuozzo ReadyKernel patch 95.1 for Virtuozzo 7.0 and Virtuozzo Infrastructure Platform 3.0
The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to the kernels 3.10.0-957.12.2.vz7.96.21 Virtuozzo 7.0.11 and Virtuozzo Infrastructure Platform 3.0, 3.10.0-1062.4.2.vz7.116.7 Virtuozzo 7.0.12 HF1. Vulnerability id: PSBM-100118 3.10.0-957.12.2.vz7.96....
Kernel update: Virtuozzo ReadyKernel patch 94.2 for Virtuozzo 7.0
The cumulative Virtuozzo ReadyKernel patch was updated with a stability fix. The patch applies to the kernels 3.10.0-693.21.1.vz7.48.2 Virtuozzo 7.0.7 HF3, 3.10.0-862.9.1.vz7.63.3 Virtuozzo 7.0.8, 3.10.0-862.11.6.vz7.64.7 Virtuozzo 7.0.8 HF1. NOTE: No more patches are planned for the kernel...
Kernel security update: Virtuozzo ReadyKernel patch 88.0 for Virtuozzo 7.0.7
The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to the kernel 3.10.0-693.17.1.vz7.43.10 Virtuozzo 7.0.7. NOTE: No more patches are planned for this kernel, support for which ends with this update. Vulnerability id: CVE-2019-11810...
Kernel security update: Virtuozzo ReadyKernel patch 70.1 for Virtuozzo 7.0.4 HF3 and 7.0.5
The cumulative Virtuozzo ReadyKernel patch was updated with security and stability fixes. The patch applies to Virtuozzo kernels 3.10.0-514.16.1.vz7.30.15 7.0.4 HF3 and 3.10.0-514.26.1.vz7.33.22 7.0.5. NOTE: No more patches are planned for kernel 3.10.0-514.16.1.vz7.30.15, support for which ends...
Kernel update: Virtuozzo ReadyKernel patch 66.0 for Virtuozzo 7.0.4 to 7.0.8 HF1
The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to all supported Virtuozzo kernels. NOTE: No more patches are planned for kernel 3.10.0-514.16.1.vz7.30.10, support for which ends with this update. Vulnerability id: PSBM-89050 cleancache: missing...
Kernel update: Virtuozzo ReadyKernel patch 65.0 for Virtuozzo 7.0.4 to 7.0.5
The cumulative Virtuozzo ReadyKernel patch was updated with stability fixes. The patch applies to Virtuozzo kernels 3.10.0-514.16.1.vz7.30.10 7.0.4, 3.10.0-514.16.1.vz7.30.15 7.0.4 HF3, and 3.10.0-514.26.1.vz7.33.22 7.0.5. Vulnerability id: PSBM-89323 Potential kernel crash in cbtflushcpucache...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
Important kernel security update: CVE-2017-18344; Virtuozzo ReadyKernel patch 56.0 for Virtuozzo 7.0.8
The cumulative Virtuozzo ReadyKernel patch was updated with a security fix. The patch applies to kernel 3.10.0-862.9.1.vz7.63.3 7.0.8. Vulnerability id: CVE-2017-18344 The implementation of timercreate system call in the Linux kernel before 4.14.8 doesn't properly validate the sigevent::sigevnoti...
Linux Kernel 4.14.7 (Ubuntu 16.04 / CentOS 7) - (KASLR & SMEP Bypass) Arbitrary File Read
// A proof-of-concept exploit for CVE-2017-18344. // Includes KASLR and SMEP bypasses. No SMAP bypass. // No support for 1 GB pages or 5 level page tables. // Tested on Ubuntu xenial 4.4.0-116-generic and 4.13.0-38-generic // and on CentOS 7 3.10.0-862.9.1.el7.x8664. // // gcc pwn.c -o pwn // // ...
NUUO NVR < 3.10.0 RCE Vulnerability - Active Check
NUUO NVR devices are prone to a remote code execution RCE vulnerability. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
Product update: Virtuozzo 6.0 Update 12 Hotfix 27 (6.0.12-3708)
This hotfix provides stability and usability fixes. Vulnerability id: PSBM-80032 prlvzvncserverapp did not honor the --listen parameter that forced VNC server to listen on a specific IP address. Vulnerability id: PSBM-84831 Unable to install Virtuozzo 6 guest tools in a VM running Centos 7 with...
Important: Red Hat Security Advisory: kernel-rt security and bug fix update
An update for kernel-rt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...
kernel security update
3.10.0-693.11.6.OL7 - Oracle Linux certificates Alexey Petrenko - Oracle Linux RHCK Module Signing Key was compiled into kernel [email protected] - Update x509.genkey bug 24817676 3.10.0-693.11.6 - x86 specctrl: Eliminate redundant FEATURE Not Present messages Andrea...
NethServer 7.3.1611 (Upload.json) CSRF Script Insertion Vulnerability
Description NethServer suffers from an authenticated stored XSS vulnerability. Input passed to the 'BackupConfigUploadDescription' POST parameter is not properly sanitised before being returned to the user. This can be exploited to execute arbitrary HTML and script code in a user's browser sessio...
NethServer 7.3.1611 - Cross-Site Request Forgery (Create User / Enable SSH Access) Vulnerability
Exploit for jsp platform in category web applications HTML Decoded PoC: history.pushState'', '', '/' input type="hidden"...
NethServer 7.3.1611 - Cross-Site Request Forgery (Create User Enable SSH Access)
NethServer 7.3.1611 - Cross-Site Request Forgery Create User Enable SSH Access HTML Decoded PoC: history.pushState'', '', '/' input type="hidden" name="AccountUsercreategrou...
