86 matches found
UBUNTU-CVE-2019-13164
qemu-bridge-helper.c in QEMU 3.1 and 4.0.0 does not ensure that a network interface name obtained from bridge.conf or a --br=bridge option is limited to the IFNAMSIZ size, which can lead to an ACL bypass...
CVE-2019-10106
CMS Made Simple 2.2.10 has XSS via the 'moduleinterface.php' Name field, which is reachable via an "Add Category" action to the "Site Admin Settings - News module" section...
netcf: augeas path expression injection via interface name
A denial of service flaw was found in netcf. A specially crafted interface name could cause an application using netcf such as the libvirt daemon to crash...
netcf: augeas path expression injection via interface name
A denial of service flaw was found in netcf. A specially crafted interface name could cause an application using netcf such as the libvirt daemon to crash...
PT-2015-7906
Name of the Vulnerable Software and Affected Versions netcf versions prior to 0.2.8 Description A denial of service flaw was found in netcf, where a specially crafted interface name could cause an application using netcf, such as the libvirt daemon, to crash. Recommendations For versions prior to...
CVE-2014-4910
Directory traversal vulnerability in tools/backlighthelper.c in X.Org xf86-video-intel 2.99.911 allows remote attackers to create or overwrite arbitrary files via a .. dot dot in the interface name...