31 matches found
Design/Logic Flaw
LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2...
CVE-2020-7209
LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2...
CVE-2020-7209
LinuxKI v6.0-1 and earlier is vulnerable to an remote code execution which is resolved in release 6.0-2...
CVE-2020-7209
CVE-2020-7209 affects LinuxKI Toolset v6.0-1 and earlier. A remote command execution vulnerability exists in the kivis.php endpoint where the pid parameter is passed to shell_exec, allowing arbitrary commands on the target. The issue is fixed in release 6.0-2. The vulnerability is exploitable ove...
CVE-2020-7208
LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2...
CVE-2020-7208
CVE-2020-7208 affects LinuxKI v6.0-1 and earlier, with an XSS vulnerability that is resolved in release 6.0-2. Multiple sources (NVD, Red Hat, OSV, CVE lists) corroborate the issue. Exploitation details are not provided in the connected documents. Remediation: upgrade to 6.0-2 or later (vendor pa...
CVE-2020-7208
LinuxKI v6.0-1 and earlier is vulnerable to an XSS which is resolved in release 6.0-2...
PT-2020-1810
Name of the Vulnerable Software and Affected Versions LinuxKI versions 6.0-1 and earlier Description The issue is related to insecure privilege management in the LinuxKI operating system. This allows a remote attacker to execute arbitrary code. The problem is resolved in release 6.0-2...
PT-2020-1809
Name of the Vulnerable Software and Affected Versions LinuxKI versions 6.0-1 and earlier Description The issue is related to the lack of input data sanitization in the LinuxKI operating system, which can be exploited by a remote attacker to perform cross-site scripting XSS attacks. Recommendation...
