63 matches found
CVE-2022-4007
A issue has been discovered in GitLab CE/EE affecting all versions from 15.3 prior to 15.7.8, version 15.8 prior to 15.8.4, and version 15.9 prior to 15.9.2 A cross-site scripting vulnerability was found in the title field of work items that allowed attackers to perform arbitrary actions on behal...
CVE-2022-4007
Removed by vendor...
FreeBSD : Gitlab -- Multiple Vulnerabilities (f7c5b3a9-b9fb-11ed-99c6-001b217b3468)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the f7c5b3a9-b9fb-11ed-99c6-001b217b3468 advisory. - An issue has been discovered in GitLab affecting all versions starting from 10.0 to 15.7.8,...
K73455417: obs-service-extract_file package vulnerability CVE-2016-4007
Security Advisory Description Multiple unspecified vulnerabilities in the obs-service-extractfile package before 0.3-5.1 in openSUSE Leap 42.1 and before 0.3-3.1 in openSUSE 13.2 allow attackers to execute arbitrary commands via a service definition, related to executing unzip with "illegal...
SUSE: Security Advisory (SUSE-SU-2022:4007-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-4007
creationtimestamp| type| source ---|---|--- 2021-12-14 18:15:20+00:00| seen| https://t.me/cibsecurity/33934...
CVE-2021-4007
Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at "C:\DLLs\python3.dll," which normally is...
CVE-2021-4007
Rapid7 Insight Agent, versions 3.0.1 to 3.1.2.34, suffer from a local privilege escalation due to an uncontrolled DLL search path. Specifically, when Insight Agent versions 3.0.1 to 3.1.2.34 start, the Python interpreter attempts to load python3.dll at "C:\DLLs\python3.dll," which normally is...
CVE-2021-4007
CVE-2021-4007 – Rapid7 Insight Agent privilege escalation : Affects Rapid7 Insight Agent runtimes 3.0.1–3.1.2.34. The root cause is an uncontrolled DLL search path where startup loads python3.dll from C:\DLLs, a writable location, allowing a local attacker to elevate to SYSTEM. Impact is local pr...
Oracle Linux 7 : systemd (ELSA-2020-4007)
The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-4007 advisory. 219-78.0.1 - Backport upstream patches related to private-tmp Sushmita Bhattacharya Orabug: 31561883 - backport upstream pstore tmpfiles patch Eric DeVolder...
RHEL 7 : systemd (RHSA-2020:4007)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:4007 advisory. The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive...
Ubuntu 18.04 LTS : Linux kernel vulnerability (USN-4007-1)
The remote Ubuntu 18.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-4007-1 advisory. Federico Manuel Bento discovered that the Linux kernel did not properly apply Address Space Layout Randomization ASLR in some situations for setuid a.out binaries...
Ubuntu: Security Advisory (USN-4007-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2018-4007
The CVE-2018-4007 entry is supported by multiple connected sources (notably TALOS-2018-0676) detailing a privilege escalation in Shimo VPN 4.1.5.1. The vulnerability resides in the helper service’s deleteConfig function, where a non-privileged caller can trigger deletion of any protected file bec...
CVE-2017-4007
CVE-2017-4007 is rejected/not used; this entry does not represent an active vulnerability.
openSUSE Security Update : obs-service-source_validator (openSUSE-2016-758)
obs-service-sourcevalidator was updated to fix one security issue. This security issue was fixed : - CVE-2016-4007: Several maintained source services are vulnerable to code/paramter injection bsc967265. This non-security issue was fixed : - bsc967610: Several occurrences of uninitialized value...
openSUSE Security Update : obs-service-source_validator (openSUSE-2016-759)
obs-service-sourcevalidator was updated to fix one security issue. This security issue was fixed : - CVE-2016-4007: Several maintained source services are vulnerable to code/paramter injection bsc967265. This non-security issue was fixed : - bsc967610: Several occurrences of uninitialized value...
openSUSE: Security Advisory for obs-service-source_validator (openSUSE-SU-2016:1659-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Security update for obs-service-source_validator (important)
obs-service-sourcevalidator was updated to fix one security issue. This security issue was fixed: - CVE-2016-4007: Several maintained source services are vulnerable to code/paramter injection bsc967265. This non-security issue was fixed: - bsc967610: Several occurrences of uninitialized value...