999 matches found
USN-5160-1: Midnight Commander vulnerability
It was discovered that Midnight Commander would not check server fingerprints when establishing an SFTP connection. If a remote attacker were able to intercept communications this flaw could be exploited to impersonate the SFTP server...
USN-5160-1 mc vulnerability
It was discovered that Midnight Commander would not check server fingerprints when establishing an SFTP connection. If a remote attacker were able to intercept communications this flaw could be exploited to impersonate the SFTP server...
OESA-2022-1771 mc security update
GNU Midnight Commander is a visual file manager, licensed under GNU General Public License and therefore qualifies as Free Software. It's a feature rich full-screen text mode application that allows you to copy, move and delete files and whole directory trees, search for files and run commands in...
The vulnerability of the Intel Manageability Commander console for connecting and utilizing Intel Active Management functions, allowing a hacker to increase their privileges.
The vulnerability of the Intel Manageability Commander console for connecting and utilizing Intel Active Management functions is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...
GHSA-485Q-V457-3P58 Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin
Jenkins Mail Commander Plugin for Jenkins-ci Plugin 1.0.0 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...
Passwords stored in plain text by Mail Commander Plugin for Jenkins-ci Plugin
Jenkins Mail Commander Plugin for Jenkins-ci Plugin 1.0.0 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller where they can be viewed by users with Extended Read permission, or access to the Jenkins controller file system...
CVE-2021-0126
Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2021-0126
Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
Input validation
Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2021-0126
This CVE (CVE-2021-0126) affects Intel® Manageability Commander before version 2.2. The root cause is improper input validation, which could allow an authenticated user to escalate privileges via adjacent access. The issue is documented with CVSS:3.1 base score 8.0 (HIGH) in the connected sources...
CVE-2021-0126
Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
CVE-2021-0126: Improper Input Validation
Improper input validation for the IntelR Manageability Commander before version 2.2 may allow an authenticated user to potentially enable escalation of privilege via adjacent access...
Intel Manageability Commander 输入验证错误漏洞
Intel Manageability Commander is a lightweight console from Intel Corporation USA. for connecting to and using Intel Active Management Technology Intel AMT features. An input validation error vulnerability exists in Intel Manageability Commander versions prior to 2.2, which stems from incorrect...
Intel® Manageability Commander Advisory
Summary: A potential security vulnerability in the Intel® Manageability Commander may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2021-0126 Description: Improper input validation for the IntelR...
redis-commander (>=0.6.7, <=0.7.2) potentially affected by CVE-2022-30241 via jquery.json-viewer (1.4.0)
jquery.json-viewer NPM version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on jquery.json-viewer and may be impacted: - redis-commander =0.6.7, =0.7.2 Source cves: CVE-2022-30241 Source advisory: OSV:GHSA-QP2Q-6H9J-JG2R...
Mageia: Security Advisory (MGASA-2022-0086)
The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
MGASA-2022-0086 Updated mc packages fix security vulnerability
An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity. CVE-2021-36370...
Updated mc packages fix security vulnerability
An issue was discovered in Midnight Commander through 4.8.26. When establishing an SFTP connection, the fingerprint of the server is neither checked nor displayed. As a result, a user connects to the server without the ability to verify its authenticity. CVE-2021-36370...
