Lucene search
+L

4666 matches found

Lenovo
Lenovo
added 2019/04/17 7:15 p.m.58 views

IMM2 FFDC includes Private Key - US

Lenovo Security Advisory: LEN-25667 Potential Impact: Information disclosure Severity: Medium Scope of Impact: Lenovo-specific CVE Identifier: CVE-2019-6157 Summary Description: In Lenovo System x, the integrated management module II IMM2's first failure data capture FFDC includes the web server'...

5CVSS2.8AI score0.01346EPSS
SaveExploits0
OSV
OSV
added 2019/04/17 3:29 p.m.10 views

CVE-2019-8455

A hard-link created from the log file of Check Point ZoneAlarm up to 15.4.062 to any file on the system will get its permission changed so that all users can access that linked file. Doing this on files with limited access gains the local attacker higher privileges to the file...

7.1CVSS7AI score0.00392EPSS
SaveExploits0References2
Broadcom
Broadcom
added 2019/04/16 12:0 a.m.13 views

BSA-2019-783

Security Advisory ID : BSA-2019-783 Component : VPN Revision : 1.0: Final Virtual Private Networks VPNs are used to create a secure connection with another network over the internet. Multiple VPN applications store the authentication and/or session cookies insecurely in memory and/or log files...

2.5CVSS7AI score0.00275EPSS
SaveExploits0
OSV
OSV
added 2019/04/15 12:31 p.m.12 views

CVE-2019-3891

It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching...

7.8CVSS6.5AI score0.00679EPSS
SaveExploits1References2
Prion
Prion
added 2019/04/15 12:31 p.m.18 views

Design/Logic Flaw

It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching...

2.1CVSS7.5AI score0.00679EPSS
SaveExploits1References2Affected Software1
CVE
CVE
added 2019/04/12 8:25 p.m.107 views

CVE-2019-3891

CVE-2019-3891 affects Red Hat Satellite/Candlepin: a world-readable log file (cpdb.log) leaks Candlepin DB credentials. A local attacker can use the credentials to modify the Candlepin database and prevent Satellite from fetching package updates, impacting all Satellite hosts. The vulnerability i...

7.8CVSS7.4AI score0.00679EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2019/04/12 8:25 p.m.37 views

CVE-2019-3891

It was discovered that a world-readable log file belonging to Candlepin component of Red Hat Satellite 6.4 leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from fetching...

5.5CVSS7.5AI score0.00679EPSS
SaveExploits1References2
RedhatCVE
RedhatCVE
added 2019/04/12 1:20 p.m.32 views

CVE-2019-3891

It was discovered that a world-readable log file, belonging to the Candlepin component of Red Hat Satellite 6.4, leaked the credentials of the Candlepin database. A malicious user with local access to a Satellite host can use those credentials to modify the database and prevent Satellite from...

7.8CVSS1.1AI score0.00679EPSS
SaveExploits1References3
Kitploit
Kitploit
added 2019/04/03 8:43 p.m.163 views

ISeeYou - Bash And Javascript Tool To Find The Exact Location Of The Users During Social Engineering Or Phishing Engagements

ISeeYou is a Bash and Javascript tool to find the exact location of the users during social engineering or phishing engagements. Using exact location coordinates an attacker can perform preliminary reconnaissance which will help them in performing further targeted attacks. Note: This tool does no...

6.8AI score
SaveExploits0References1
OSV
OSV
added 2019/03/29 12:16 p.m.9 views

SUSE-SU-2019:0805-1 Recommended update for adcli, sssd

This update for adcli and sssd provides the following improvement: Security vulnerability fixed: - CVE-2019-3811: Fix fallbackhomedir returning '/' for empty home directories bsc1121759 Other fixes: - Add an option to disable checking for trusted domains in the subdomains provider bsc1125617 -...

5.2CVSS5.5AI score0.00696EPSS
SaveExploits0References7
OSV
OSV
added 2019/03/23 11:9 a.m.9 views

OPENSUSE-SU-2019:0293-1 Security update for supportutils

This update for supportutils fixes the following issues: Security issues fixed: - CVE-2018-19640: Fixed an issue where users could kill arbitrary processes bsc1118463. - CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files bsc1118460. - CVE-2018-19639: Fixed a code...

7.8CVSS7.9AI score0.00503EPSS
SaveExploits0References18
OSV
OSV
added 2019/03/12 5:40 p.m.9 views

SUSE-SU-2019:13976-1 Security update for supportutils

This update for supportutils fixes the following issues: Security vulnerabilities fixed: - CVE-2018-19636: Local root exploit via inclusion of attacker controlled shell script bsc1117751 - CVE-2018-19640: Users can kill arbitrary processes bsc1118463 - CVE-2018-19638: User can overwrite arbitrary...

7.8CVSS8AI score0.00503EPSS
SaveExploits0References9
OSV
OSV
added 2019/03/06 4:20 p.m.6 views

SUSE-SU-2019:0563-1 Security update for audit

This update for audit fixes the following issues: Audit on SUSE Linux Enterprise 12 SP4 was updated to 2.8.1 to bring new features and bugfixes. bsc1125535 FATE326346 Many features were added to auparsenormalize cli option added to auditd and audispd for setting config dir In auditd, restore the...

5.3CVSS5.6AI score0.02755EPSS
SaveExploits0References6
OSV
OSV
added 2019/03/05 4:29 p.m.8 views

CVE-2018-19637

Supportutils, before version 3.1-5.7.1, wrote data to static file /tmp/supplog, allowing local attackers to overwrite files on systems without symlink protection...

5.5CVSS5.8AI score0.00457EPSS
SaveExploits0References2
OSV
OSV
added 2019/02/25 10:55 a.m.7 views

SUSE-SU-2019:0480-1 Security update for supportutils

This update for supportutils fixes the following issues: Security issues fixed: - CVE-2018-19640: Fixed an issue where users could kill arbitrary processes bsc1118463. - CVE-2018-19638: Fixed an issue where users could overwrite arbitrary log files bsc1118460. - CVE-2018-19639: Fixed a code...

7.8CVSS6.8AI score0.00503EPSS
SaveExploits0References18
Github Security Blog
Github Security Blog
added 2019/02/18 11:39 p.m.30 views

grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file

Versions of grunt-gh-pages prior to 0.10.0 are affected by a vulnerability which may cause unencrypted GitHub credentials to be written to a log file in certain circumstances. In the grunt-gh-pages deployment scenario where authentication is performed by injecting a GitHub token directly into the...

8.6CVSS3.8AI score0.01637EPSS
SaveExploits0References6Affected Software1
OSV
OSV
added 2019/02/18 11:39 p.m.41 views

GHSA-RRJ3-QMH8-72PF grunt-gh-pages before 0.10.0 may allow unencrypted GitHub credentials to be written to a log file

Versions of grunt-gh-pages prior to 0.10.0 are affected by a vulnerability which may cause unencrypted GitHub credentials to be written to a log file in certain circumstances. In the grunt-gh-pages deployment scenario where authentication is performed by injecting a GitHub token directly into the...

8.6CVSS8.7AI score0.01637EPSS
SaveExploits0References6
Kitploit
Kitploit
added 2019/02/10 1:13 p.m.206 views

Hontel - Telnet Honeypot

HonTel is a Honeypot for Telnet service. Basically, it is a Python v2.x application emulating the service inside the chroot environment. Originally it has been designed to be run inside the Ubuntu environment, though it could be easily adapted to run inside any Linux environment. Documentation:...

7.5AI score
SaveExploits0References3
BDU FSTEC
BDU FSTEC
added 2019/02/05 12:0 a.m.7 views

The vulnerability in the software for automatically processing group configurations and assigning processes to groups of libcgroups relates to errors in the access control mechanism, allowing an intruder to gain unauthorized access to protected information.

The vulnerability of the software for automatically processing group configurations and assigning processes to groups related to libcgroup lies in the creation of the "/var/log/cgred" file with access rights of 0666, regardless of the umask setting. Exploiting this vulnerability can allow an...

8.1CVSS6.5AI score0.02316EPSS
SaveExploits0References4Affected Software1
Veeam
Veeam
added 2019/02/01 12:0 a.m.23 views

Microsoft Azure password may be found in the Veeam log file

Challenge Password for Microsoft Azure account may be found in the C:\ProgramData\Veeam\Backup\VeeamBackupManager.log file in plain text format. Cause This vulnerability is caused by executing a command from the KB article on how to configure Granular permissions for Microsoft Azure user. Solutio...

7AI score
SaveExploits0
Rows per page
Query Builder