cap-ocean.fr Cross Site Scripting vulnerability OBB-1377631

Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website operator about its existence...

The vulnerability of the CAP_NET_RAW component in software for automated deployment and application management in Docker-enabled environments allows a attacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the CAPNETRAW component in software for automated deployment and management of applications in Docker-enabled environments is related to the lack of a mechanism for checking input data. Exploiting this vulnerability can allow an attacker operating remotely to access...

PT-2020-5185

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.8.2 Description The issue is related to a missing CAP NET RAW check in NFC socket creation in the Linux kernel. This could allow local attackers to create raw sockets, bypassing security mechanisms...

PT-2020-3631

Name of the Vulnerable Software and Affected Versions Docker Engine versions prior to 19.03.11 Description The issue is related to a lack of input validation in the CAP NET RAW component of Docker Engine, which can be exploited by a remote attacker to gain access to sensitive information,...

cap-music.de Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1173188 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

CVE-2020-8018

A Incorrect Default Permissions vulnerability in the SLES15-SP1-CHOST-BYOS and SLES15-SP1-CAP-Deployment-BYOS images of SUSE Linux Enterprise Server 15 SP1 allows local attackers with the UID 1000 to escalate to root due to a /etc directory owned by the user This issue affects: SUSE Linux...

CVE-2020-8018

CVE-2020-8018 affects SUSE Linux Enterprise Server 15 SP1: SLES15-SP1-CHOST-BYOS before 1.0.3 and SLES15-SP1-CAP-Deployment-BYOS before 1.0.1, where a /etc directory owned by UID 1000 enables local privilege escalation to root. This is a local vulnerability; exploitation details are not provided ...

CVE-2020-9272

ProFTPD 1.3.7 has an out-of-bounds OOB read vulnerability in modcap via the captext.c captotext function...

PT-2020-20566

Name of the Vulnerable Software and Affected Versions ProFTPD version 1.3.7 Description The issue is an out-of-bounds OOB read vulnerability in the mod cap module via the cap to text function in cap text.c. Recommendations For ProFTPD version 1.3.7, consider disabling the mod cap module until a...

PT-2020-6447

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.5-rc7 Description A flaw was found in the Linux kernel netfilter implementation. The issue is caused by a buffer overflow. A user with root CAP SYS ADMIN access can panic the system when issuing netfilter netfl...

UBUNTU-CVE-2019-18786

In the Linux kernel through 5.3.8, f-fmt.sdr.reserved is uninitialized in rcardrifgfmtsdrcap in drivers/media/platform/rcardrif.c, which could cause a memory disclosure problem...

DEBIAN-CVE-2019-17055

basesockcreate in drivers/isdn/mISDN/socket.c in the AFISDN network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-b91ee4aa2a21...

DEBIAN-CVE-2019-17052

ax25create in net/ax25/afax25.c in the AFAX25 network module in the Linux kernel 3.16 through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-0614e2b73768...

UBUNTU-CVE-2019-17054

atalkcreate in net/appletalk/ddp.c in the AFAPPLETALK network module in the Linux kernel through 5.3.2 does not enforce CAPNETRAW, which means that unprivileged users can create a raw socket, aka CID-6cc03e8aa36c...

CVE-2019-10539

Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

CVE-2019-10539: Buffer Copy without Checking Size of Input

Possible buffer overflow issue due to lack of length check when parsing the extended cap IE header length in Snapdragon Auto, Snapdragon Compute, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Voice & Music, Snapdrag...

PT-2019-4750

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.2 Description The issue is related to the ieee802154 create function in the AF IEEE802154 network module, which does not enforce the CAP NET RAW capability. This means that unprivileged users can create a raw...

PT-2019-4752

Name of the Vulnerable Software and Affected Versions Linux kernel versions through 5.3.2 Description The issue is related to the base sock create function in the AF ISDN network module of the Linux kernel, which lacks sufficient input validation. This can be exploited to impact data integrity...

Updated irssi packages fix security vulnerability

Updated irssi packages fix security vulnerability: Irssi 1.2.x before 1.2.2 has a use-after-free if the IRC server sends a double CAP CVE-2019-15717...

USN-4119-1: Irssi vulnerability

It was discovered that Irssi incorrectly handled certain CAP requests. An attacker could possibly use this issue to cause a denial of service or execute arbitrary code...