cpython environment issue vulnerability

cpython is the Python Foundation's Python interpreter implemented in the C language. An environment issue vulnerability exists in cpython, which can be exploited to allow an attacker to separate query parameters using a semicolon ;, resulting in a malicious request being cached as a completely sa...

CVE-2020-23735

In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges...

Privilege escalation

In Saibo Cyber Game Accelerator 3.7.9 there is a local privilege escalation vulnerability. Attackers can use the constructed program to increase user privileges...

PT-2020-16165 · Moodle +1 · Moodle +1

Name of the Vulnerable Software and Affected Versions: Moodle versions 3.7 through 3.7.8 Moodle versions 3.8 through 3.8.5 Moodle versions 3.9 through 3.9.2 Description: The participants table download in Moodle always included user emails, but should have only done so when users' emails are not...

Wordpress Usernoise Plugin 3.7.8 - Persistent XSS Vulnerability

No description provided by source. Details ============================= Application: Usernoise http://usernoise.karevn.com/ Version: 3.7.8 probably earlier versions as well Type: Wordpress plugin Developer: Nikolay Karev http://karevn.com/ - http://profiles.wordpress.org/karevn/ Vulnerability:...

Sophos Web Protection Appliance Multiple Vulnerabilities (Jul 2013) - Active Check

Sophos Web Protection Appliance is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Fedora Update for kernel FEDORA-2013-3106

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Fedora 17 : kernel-3.7.9-104.fc17 (2013-3106)

This update contains a fix for the netlink out-of-bounds access issue which could allow a local user to gain privileged access. All users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Fedora 18 : kernel-3.7.9-205.fc18 (2013-3086)

This update contains a fix for the netlink out-of-bounds access issue which could allow a local user to gain privileged access. All users are encouraged to update. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable...

Fedora 18 : kernel-3.7.9-201.fc18 (2013-2728)

Update to latest upstream stable 3.7.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. %NASLMINLEVEL...

Mandriva Update for logrotate MDVSA-2011:065 (logrotate)

Check for the Version of logrotate OpenVAS Vulnerability Test Mandriva Update for logrotate MDVSA-2011:065 logrotate Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Mandriva Linux Security Advisory : logrotate (MDVSA-2011:065)

Multiple vulnerabilities were discovered and corrected in logrotate : Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place CVE-2011-1098. The shredfile...

CVE-2011-1154

The shredfile function in logrotate.c in logrotate 3.7.9 and earlier might allow context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename, as demonstrated by a filename that is automatically constructed on the basis of a hostname or virtual machine name...

Race condition

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place...

CVE-2011-1098

Race condition in the createOutputFile function in logrotate.c in logrotate 3.7.9 and earlier allows local users to read log data by opening a file before the intended permissions are in place...

PT-2011-1093 · Logrotate +2 · Logrotate +2

Name of the Vulnerable Software and Affected Versions: logrotate versions 3.7.9 and earlier logrotate versions prior to 3.8.0 Description: The issue allows context-dependent attackers to execute arbitrary commands via shell metacharacters in a log filename. This can be demonstrated by a filename...