Lucene search
+L

1534 matches found

Cvelist
Cvelist
•added 2019/08/01 3:44 p.m.•37 views

CVE-2016-10840

cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...

9AI score0.02058EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/01 3:44 p.m.•64 views

CVE-2016-10840

CVE-2016-10840 affects cPanel prior to 11.54.0.4. The issue allows arbitrary code execution during locale duplication (SEC-72). Affected product: cPanel (control panel software). The vulnerability is evidenced in multiple sources, including NVD and Red Hat’s CVE listing, indicating an in-product ...

9CVSS8.9AI score0.02058EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/01 3:18 p.m.•34 views

CVE-2018-20926

cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface SEC-380...

6.8AI score0.00394EPSS
SaveExploits0References1
CVE
CVE
•added 2019/08/01 3:18 p.m.•70 views

CVE-2018-20926

CVE-2018-20926 affects cPanel before 70.0.23 and allows local privilege escalation via the WHM Locale XML Upload interface (SEC-380). Red Hat notes the issue in cPanel prior to 70.0.23; CNVD/CVELIST entries confirm the same. Impact is local, with privileges elevated if exploited. Remediation is u...

7.2CVSS6.7AI score0.00394EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/01 12:00 a.m.•7 views

PT-2019-10359

Name of the Vulnerable Software and Affected Versions: cPanel versions prior to 70.0.23 Description: The issue allows local privilege escalation via the WHM Locale XML Upload interface. Recommendations: For versions prior to 70.0.23, update to version 70.0.23 or later to resolve the issue...

7.2CVSS0.00394EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/08/01 12:00 a.m.•3 views

PT-2019-7636

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 11.54.0.4 Description The issue allows for arbitrary code execution during locale duplication. Recommendations For versions prior to 11.54.0.4, update to version 11.54.0.4 or later to resolve the issue...

9CVSS0.02058EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/01 12:00 a.m.•9 views

CVE-2018-20926: Unrestricted Upload of File with Dangerous Type

cPanel before 70.0.23 allows local privilege escalation via the WHM Locale XML Upload interface SEC-380...

7.2CVSS5.8AI score0.00394EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/01 12:00 a.m.•4 views

CVE-2016-10840: Exposure of Resource to Wrong Sphere

cPanel before 11.54.0.4 allows arbitrary code execution during locale duplication SEC-72...

9CVSS6.3AI score0.02058EPSS
SaveExploits0References2
AlmaLinux
AlmaLinux
•added 2019/07/30 5:20 p.m.•30 views

compat-locales-sap bug fix update

The compat-locales-sap packages provide various compatibility locales for use with SAP Application Servers. Bug Fixes: Scriplet errors during installation BZ1688815 Segmentation fault: core dumped /usr/sbin/build-locale-archive BZ1702200...

2.1AI score
SaveExploits0
osv_debian
osv_debian
•added 2019/06/18 6:15 p.m.•11 views

DEBIAN-CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS8.3AI score0.00531EPSS
SaveExploits0References1
Prion
Prion
•added 2019/06/18 6:15 p.m.•20 views

Heap overflow

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

4.6CVSS7.4AI score0.00531EPSS
SaveExploits0References6Affected Software2
attackerkb
attackerkb
•added 2019/06/18 6:15 p.m.•14 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS6AI score0.00531EPSS
SaveExploits0References10
osv_ubuntu
osv_ubuntu
•added 2019/06/18 6:15 p.m.•12 views

UBUNTU-CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.5AI score0.00531EPSS
SaveExploits0References3
UbuntuCve
UbuntuCve
•added 2019/06/18 6:15 p.m.•39 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.4AI score0.00531EPSS
SaveExploits0References2
Debian CVE
Debian CVE
•added 2019/06/18 5:34 p.m.•92 views

CVE-2012-6711

A heap-based buffer overflow exists in GNU Bash before 4.3 when wide characters, not supported by the current locale set in the LCCTYPE environment variable, are printed through the echo built-in function. A local attacker, who can provide data to print through the "echo -e" built-in function, ma...

7.8CVSS7.7AI score0.00531EPSS
SaveExploits0
NVD
NVD
•added 2019/05/28 3:29 a.m.•22 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS4.5AI score0.02164EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2019/05/28 3:29 a.m.•22 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS5.9AI score0.02164EPSS
SaveExploits0References4
osv_cve
osv_cve
•added 2019/05/28 3:29 a.m.•21 views

CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS6.6AI score0.02164EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2019/05/28 3:29 a.m.•18 views

DEBIAN-CVE-2019-12383

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS6.7AI score0.02164EPSS
SaveExploits0References1
Prion
Prion
•added 2019/05/28 3:29 a.m.•26 views

Information disclosure

Tor Browser before 8.0.1 has an information exposure vulnerability. It allows remote attackers to detect the browser's UI locale by measuring a button width, even if the user has a "Don't send my language" setting...

4.3CVSS4.5AI score0.02164EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder