Keybase: Privilege Escalation via Keybase Helper

A privilege escalation vulnerability exists within the KeybaseHelper application available when installing the Keybase Desktop Application on MacOS. The issue is exposed via a LaunchDaemon plist which is installed within /Library/LaunchDaemons/keybase.Helper.plist. This file is responsible for...

DEBIAN-CVE-2018-10900

Network Manager VPNC plugin aka networkmanager-vpnc before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root...

UBUNTU-CVE-2018-10900

Network Manager VPNC plugin aka networkmanager-vpnc before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root...

CVE-2018-10900

Network Manager VPNC plugin aka networkmanager-vpnc before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root...

CVE-2018-10900

Network Manager VPNC plugin aka networkmanager-vpnc before version 1.2.6 is vulnerable to a privilege escalation attack. A new line character can be used to inject a Password helper parameter into the configuration data passed to VPNC, allowing an attacker to execute arbitrary commands as root...

Network Manager VPNC Username Privilege Escalation

This module exploits an injection vulnerability in the Network Manager VPNC plugin to gain root privileges. This module uses a new line injection vulnerability in the configured username for a VPN network connection to inject a Password helper configuration directive into the connection...

Network Manager VPNC Elevation of Privilege Vulnerability

Network Manager VPNC plugin networkmanager-vpnc is a virtual network manager that supports connection to Cisco VPN. A security vulnerability exists in the Network Manager VPNC plugin prior to version 1.2.6, which stems from a newline character that can be used to inject the password helper...

Libgig Out-of-Bounds Write Vulnerability

libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound level 1/2 files, KORG sample-based instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. An out-of-bounds write vulnerability exists in the store16...

libgig Heap Buffer Overflow Vulnerability

libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound level 1/2 files, KORG sample-based instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. A heap buffer overflow vulnerability exists in the pData1...

Libgig Out-of-Bounds Read Vulnerability

libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound level 1/2 files, KORG sample-based instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. An out-of-bounds read vulnerability exists in the store32...

libgig heap buffer overflow vulnerability (CNVD-2018-15174)

libgig is a C++ library for loading, modifying existing and creating new Gigasampler .gig files and DLS downloadable sound level 1/2 files, KORG sample-based instruments .KSF and .KMP files, SoundFont v2 .sf2 files and AKAI sampler data. A heap-based buffer overflow vulnerability exists in the...

PT-2018-10170

Name of the Vulnerable Software and Affected Versions Network Manager VPNC plugin versions prior to 1.2.6 Description The issue allows for a privilege escalation attack. An attacker can inject a Password helper parameter into the configuration data passed to VPNC by using a new line character,...

DEBIAN-CVE-2018-14459

An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData0 access in the function store16 in helper.h...

DEBIAN-CVE-2018-14458

An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData1 access in the function store32 in helper.h...

UBUNTU-CVE-2018-14455

An issue was discovered in libgig 4.1.0. There is an out-of-bounds write in pData0 access in the function store32 in helper.h...

UBUNTU-CVE-2018-14458

An issue was discovered in libgig 4.1.0. There is a heap-based buffer overflow in pData1 access in the function store32 in helper.h...

CVE-2018-14345

An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and...

CVE-2018-14345: Improper Authentication

An issue was discovered in SDDM through 0.17.0. If configured with ReuseSession=true, the password is not checked for users with an already existing session. Any user with access to the system D-Bus can therefore unlock any graphical session. This is related to daemon/Display.cpp and...

aws-ml-helper (0.0.0), silverweasel (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2018-7750 via paramiko (2.4.0)

paramiko PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aws-ml-helper 0.0.0 - silverweasel =0.0.1, =0.0.6 - usine 0.1.0 Source cves: CVE-2018-7750 Source advisory: GHSA-232R-66CG-79PX...

aws-ml-helper (0.0.0), silverweasel (>=0.0.1, <=0.0.6) +1 more potentially affected by CVE-2018-7750 via paramiko (2.4.0)

paramiko PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on paramiko and may be impacted: - aws-ml-helper 0.0.0 - silverweasel =0.0.1, =0.0.6 - usine 0.1.0 Source cves: CVE-2018-7750 Source advisory: OSV:GHSA-232R-66CG-79PX...