Lucene search
+L

107 matches found

Ubuntu
Ubuntu
•added 2017/03/27 9:36 p.m.•66 views

USN-3246-1: Eject vulnerability

Ilja Van Sprundel discovered that dmcrypt-get-device incorrectly checked setuid and setgid return values. A local attacker could use this issue to execute code as an administrator...

7.8CVSS7.4AI score0.00469EPSS
SaveExploits0
UbuntuCve
UbuntuCve
•added 2017/03/27 12:00 a.m.•35 views

CVE-2017-6964

dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the 1 setuid or 2 setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. This affects eject through...

7.8CVSS7.2AI score0.00469EPSS
SaveExploits0References2
OpenVAS
OpenVAS
•added 2017/03/27 12:00 a.m.•23 views

Debian: Security Advisory (DSA-3823-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.6AI score0.00469EPSS
SaveExploits0References3
OSV
OSV
•added 2017/03/27 12:00 a.m.•18 views

UBUNTU-CVE-2017-6964

dmcrypt-get-device, as shipped in the eject package of Debian and Ubuntu, does not check the return value of the 1 setuid or 2 setgid function, which might cause dmcrypt-get-device to execute code, which was intended to run as an unprivileged user, as root. This affects eject through...

7.8CVSS7.2AI score0.00469EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2017/03/27 12:00 a.m.•16 views

PT-2017-2372 · Debian +1 · Eject +1

Name of the Vulnerable Software and Affected Versions: eject versions 2.1.5+deb1+cvs20081104-13.1 and earlier on Debian eject versions before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.10.1 on Ubuntu 16.10 eject versions before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.04.1 on Ubuntu 16.04 LTS eject...

7.8CVSS7.5AI score0.00469EPSS
SaveExploits0References18
CNVD
CNVD
•added 2015/02/28 12:00 a.m.•50 views

D-Link DIR-645 Wired/Wireless Router OS Command Injection Vulnerability

The D-Link DIR-645 is an adjustable wireless transmit power router product from AUO D-Link. A security vulnerability exists in the D-Link DIR-645 Wired/Wireless Router Rev. Ax. A remote attacker can exploit this vulnerability to execute arbitrary code by performing a GetDeviceSettings operation o...

10CVSS7.9AI score0.97101EPSS
SaveExploits4References1
OSV
OSV
•added 2013/11/12 2:35 p.m.•10 views

CVE-2013-4515

The bcmcharioctl function in drivers/staging/bcm/Bcmchar.c in the Linux kernel before 3.12 does not initialize a certain data structure, which allows local users to obtain sensitive information from kernel memory via an IOCTLBCMGETDEVICEDRIVERINFO ioctl call...

7.1AI score
SaveExploits0References17
Rows per page
Query Builder