Ubuntu: Security Advisory (USN-3368-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : libiberty vulnerabilities (USN-3368-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3368-1 advisory. It was discovered that libiberty incorrectly handled certain string operations. If a user or automated system were tricked into processing a...

Ubuntu 14.04 LTS / 16.04 LTS : Valgrind vulnerabilities (USN-3337-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-3337-1 advisory. It was discovered that Valgrind incorrectly handled certain string operations. If a user or automated system were tricked into processing a...

USN-3337-1 valgrind vulnerabilities

It was discovered that Valgrind incorrectly handled certain string operations. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu...

USN-3337-1: Valgrind vulnerabilities

It was discovered that Valgrind incorrectly handled certain string operations. If a user or automated system were tricked into processing a specially crafted binary, a remote attacker could possibly execute arbitrary code. This issue only affected Ubuntu 14.04 LTS, Ubuntu 16.04 LTS and Ubuntu...

CVE-2014-4490

...

CVE-2014-4490

This CVE entry is rejected/not used and does not represent an active vulnerability entry.

DEBIAN-CVE-2016-4490

Integer overflow in cp-demangle.c in libiberty allows remote attackers to cause a denial of service segmentation fault and crash via a crafted binary, related to inconsistent use of the long and int types for lengths...

CVE-2016-4490

CVE-2016-4490 affects the GNU Compiler Collection (GCC). It is caused by a write access violation in cp-demangle.c (libiberty) that could allow a remote attacker to execute arbitrary code. The provided documents do not include a remediation or fixed version; consult GCC/security advisories for av...

DLA-552-1 binutils - security update

Bulletin has no description...

openSUSE: Security Advisory for MozillaFirefox (openSUSE-SU-2015:1389-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2015-4490

Mozilla Firefox before 40.0 is affected: Content Security Policy wildcard handling allowed blob:, data:, and filesystem: URLs to bypass CSP expectations, enabling potential XSS. This is discussed in MFSA2015-91 and related advisories; remediation is to upgrade Firefox (and ESR) to a version where...

CVE-2013-4490

creationtimestamp| type| source ---|---|--- 2014-08-19 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/34362 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/http/gitlabshellexec.rb 2025-02-06 03:13:41+00:00| seen|...

Gitlab-shell Code Execution Exploit

This Metasploit module takes advantage of the addition of authorized ssh keys in the gitlab-shell functionality of Gitlab. Versions of gitlab-shell prior to 1.7.4 used the ssh key provided directly in a system call resulting in a command injection vulnerability. As this relies on adding an ssh ke...

Gitlab-shell Code Execution

This module takes advantage of the addition of authorized ssh keys in the gitlab-shell functionality of Gitlab. Versions of gitlab-shell prior to 1.7.4 used the ssh key provided directly in a system call resulting in a command injection vulnerability. As this relies on adding an ssh key to an...

CVE-2013-4490

Summary (CVE-2013-4490) : The SSH key upload feature (lib/gitlab_keys.rb) in gitlab-shell before 1.7.3 allows a remote authenticated user to execute arbitrary commands via shell metacharacters in a public key. Affected environments include GitLab 5.0 before 5.4.1 and 6.x before 6.2.3 when using t...

CVE-2012-4490

The CVE-2012-4490 issue affects the Drupal Excluded Users module (versions 6.x-1.x prior to 6.x-1.1). It enables cross-site scripting via two input fields: user name and email address. The documented impact is client-side script/HTML injection (XSS) with no server-side impact specified beyond tha...

CVE-2010-4490

CVE-2010-4490 affects Google Chrome prior to 8.0.552.215. A remote attacker could cause a denial of service (application crash) or potentially other unspecified impact by providing malformed video content that triggers an indexing error. The vulnerability is network-exploitable (no authentication...

CVE-2010-4490

Removed by vendor...

CVE-2009-4490

minihttpd 1.19 writes data to a log file without sanitizing non-printable characters, which might allow remote attackers to modify a window's title, or possibly execute arbitrary commands or overwrite files, via an HTTP request containing an escape sequence for a terminal emulator...