CVE-2019-9669

The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector. NOTE: It has been asserted that this is not a valid vulnerability in the context of the Wordfence WordPress plugin as the firewall rules are not maintained as part of the Wordfence software but rather it is a set of...

Design/Logic Flaw

DISPUTED The Wordfence plugin 7.2.3 for WordPress allows XSS via a unique attack vector. NOTE: It has been asserted that this is not a valid vulnerability in the context of the Wordfence WordPress plugin as the firewall rules are not maintained as part of the Wordfence software but rather it is a...

The vulnerability of the iptables security group driver of the Neutron SDN-platform for OpenStack, related to incorrect handling of security group configurations, allows attackers to circumvent established security policy rules.

The vulnerability of the iptables security group driver of the Neutron SDN-platform for the OpenStack platform is related to incorrect handling of security group configurations. Exploiting this vulnerability allows a malicious actor to circumvent established security policies by blocking further...

PT-2019-19788 · Wordfence · Wordfence

Name of the Vulnerable Software and Affected Versions: Wordfence plugin version 7.2.3 Description: The issue concerns a potential XSS attack vector in the Wordfence plugin for WordPress. However, it has been noted that this may not be considered a valid vulnerability within the context of the...

The vulnerability of the ASN.1 BER dissector component of the Wireshark network traffic analyzer tool, which is related to the execution of operations beyond the memory limit, allows attackers to cause a service failure.

The vulnerability of the ASN.1 BER component epan/dissectors/packet-ber.c, a dissector for analyzing computer network traffic in Wireshark, is related to the execution of operations beyond the memory limits. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

kubernetes: Incorrect rule injection in CNI portmap plugin

Cloud Native Computing Foundation CNCF CNI Container Networking Interface 0.7.4 has a network firewall misconfiguration which affects Kubernetes. The CNI 'portmap' plugin, used to setup HostPorts for CNI, inserts rules at the front of the iptables nat chains; which take precedence over the KUBE-...

Vulnerability Spotlight: Symantec Endpoint Protection kernel memory information disclosure vulnerability

Marcin Noga of Cisco Talos discovered this vulnerability. Overview Cisco Talos is disclosing an information leak vulnerability in the ccSetx86.sys kernel driver of Symantec Endpoint Protection Small Business Edition. The vulnerability exists in the driver’s control message handler. An attacker ca...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

DEBIAN-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

AZL-6306 CVE-2016-1585 affecting package apparmor for versions less than 2.13-16

In all versions of AppArmor mount rules are accidentally widened when compiled...

ALPINE-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

Code injection

In all versions of AppArmor mount rules are accidentally widened when compiled...

UBUNTU-CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585 AppArmor mount rules grant excessive permissions

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

CVE-2016-1585: The AppArmor policy compiler widens mount rules in all versions when compiled. Vulnerability is discussed in multiple sources; patches exist in AppArmor 2.13-16 (and earlier 2.13-12) with advisories noting updated packages. Debian/Ubuntu references indicate ongoing remediation; imp...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

CVE-2016-1585

In all versions of AppArmor mount rules are accidentally widened when compiled...

PT-2019-7813 · Canonical +2 · Apparmor +3

Name of the Vulnerable Software and Affected Versions: AppArmor affected versions not specified Description: The issue affects AppArmor, where mount rules are accidentally widened when compiled. Recommendations: At the moment, there is no information about a newer version that contains a fix for...