The vulnerability of the implementation of the OTP mechanism in the OATH Toolkit software for authentication allows a perpetrator to increase their privileges.

The vulnerability of the OATH Toolkit software’sOTP mechanism is related to the incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level and create symbolic links to critical system files...

CBL Mariner 2.0 Security Update: oath-toolkit (CVE-2024-47191)

The version of oath-toolkit installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2024-47191 advisory. - pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because...

CVE-2024-47191

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...

CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.7-3

CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.7-3. A patched version of the package is available...

CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.9-2

CVE-2024-47191 affecting package oath-toolkit for versions less than 2.6.9-2. A patched version of the package is available...

The software for creating and running NVIDIA Container Toolkit containers, as well as the NVIDIA GPU Operator resource management software, is vulnerable. This vulnerability allows attackers to escalate their privileges or execute arbitrary code.

The vulnerability of software for creating and running NVIDIA Container Toolkit containers, as well as software for managing NVIDIA GPU resources, is related to the assignment of a zero pointer due to concurrent access to resources. Exploiting this vulnerability allows a malicious actor to enhanc...

Debian: Security Advisory (DSA-5784-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-47386

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in WP Extended The Ultimate WordPress Toolkit – WP Extended wpextended allows Reflected XSS.This issue affects The Ultimate WordPress Toolkit – WP Extended: from n/a through = 3.0.8...

CVE-2024-47386

CVE-2024-47386 affects The Ultimate WordPress Toolkit – WP Extended (WordPress plugin) up to version 3.0.8. Root cause: improper input neutralization during web page generation, enabling reflected XSS. CVSSv3.1 base score 7.1 (HIGH). Remediation: upgrade to v3.0.9 or later; Patchstack and CVE rec...

SUSE CVE-2024-47191

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...

WordPress plugin The Ultimate WordPress Toolkit – WP Extended 跨站脚本漏洞

WordPress and the WordPress plugin are both products of the WordPress Foundation, a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. WordPress plugin The Ultimate WordPress Toolkit - WP...

PT-2024-32605 · WordPress · Wp Extended

Name of the Vulnerable Software and Affected Versions: The Ultimate WordPress Toolkit – WP Extended versions n/a through 3.0.8 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS or Reflected XSS. This allows...

[SECURITY] [DSA 5784-1] oath-toolkit security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5784-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso October 04, 2024 https://www.debian.org/security/faq -...

CVE-2024-47191

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...

OATH Toolkit 安全漏洞

OATH Toolkit is an open source toolkit from deepin. A security vulnerability exists in OATH Toolkit versions 2.6.7 through 2.6.11, which stems from a PAM module that allows a malicious user to compromise the environment when placing an OTP status file in a user's home directory...

NVIDIA CUDA Toolkit < 12.6.77 (12.6U2) Multiple Vulnerabilities (October 2024)

The version of NVIDIA CUDA Toolkit installed on the remote host is prior to 12.6.77 12.6U2. It is, therefore, affected by multiple vulnerabilities as referenced in the October 2024 advisory. - NVIDIA CUDA toolkit for Windows and Linux contains a vulnerability in the nvdisasm command line tool whe...

Debian dsa-5784 : liboath-dev - security update

The remote Debian 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5784 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5784-1 [email protected] https://www.debian.org/security/...

UBUNTU-CVE-2024-47191

pamoath.so in oath-toolkit 2.6.7 through 2.6.11 before 2.6.12 allows root privilege escalation because, in the context of PAM code running as root, it mishandles usersfile access, such as by calling fchown in the presence of a symlink...

DSA-5784-1 oath-toolkit - security update

Bulletin has no description...

[ASA-202410-1] oath-toolkit: privilege escalation

Arch Linux Security Advisory ASA-202410-1 ========================================= Severity: High Date : 2024-10-04 CVE-ID : CVE-2024-47191 Package : oath-toolkit Type : privilege escalation Remote : No Link : https://security.archlinux.org/AVG-2857 Summary ======= The package oath-toolkit befor...