259 matches found
PT-2023-14517 · Intel · Intel Unison
Name of the Vulnerable Software and Affected Versions: IntelR UnisonTM versions prior to 10.12 Description: The issue involves the use of hard-coded credentials in some IntelR UnisonTM software, which may allow an authenticated user to potentially enable information disclosure via local access...
PT-2023-20280 · Intel · Intel Unison
Name of the Vulnerable Software and Affected Versions: IntelR UnisonTM versions prior to 10.12 Description: The issue is related to improper access control in IntelR UnisonTM software, which may allow a privileged user to potentially enable escalation of privilege via network access...
Intel® Unison™ Software Advisory
Summary: Potential security vulnerabilities in some Intel® Unison™ software may allow escalation of privilege or information disclosure. Intel is releasing software updates to mitigate these potential vulnerabilities. Vulnerability Details: CVEID: CVE-2023-25757 Description: Improper access contr...
join.unison.org.uk Cross Site Scripting vulnerability OBB-3506377
Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...
Unison Desktop OS Personal Edition (1030) x86_64 is vulnerable to integer overflow
Unison Desktop OS Personal Edition is a home-grown desktop operating system built by Unison Software based on the Linux 5.3 kernel and launched specifically for personal users. An integer overflow vulnerability exists in Unisys Desktop OS Personal Edition 1030 x8664. An attacker can exploit the...
wirralunison.co.uk Cross Site Scripting vulnerability OBB-1261695
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
unisonworkspaces.co.nz Cross Site Scripting vulnerability
Open Bug Bounty ID: OBB-1188078 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website...
The Gospels in Unison - SQLite database found, Suspicious files vulnerabilities
HackApp vulnerability scanner discovered that application The Gospels in Unison published at the 'play' market has multiple vulnerabilities...
Unison League - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Unison League published at the 'play' market has multiple vulnerabilities...
Debian: Security Advisory (DSA-1473-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Debian Security Advisory DSA 1473-1 (scponly)
The remote host is missing an update to scponly announced via advisory DSA 1473-1. OpenVAS Vulnerability Test $Id: deb14731.nasl 6616 2017-07-07 12:10:49Z cfischer $ Description: Auto-generated from advisory DSA 1473-1 scponly Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...
Debian DSA-1473-1 : scponly - design flaw
Joachim Breitner discovered that Subversion support in scponly is inherently insecure, allowing execution of arbitrary commands. Further investigation showed that rsync and Unison support suffer from similar issues. This set of issues has been assigned CVE-2007-6350. In addition, it was discovere...
scponly privilege escalation
Code execution with Subversion, Unison, rsync...
[SECURITY] [DSA 1473-1] New scponly packages fix arbitrary code execution
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1473 [email protected] http://www.debian.org/security/ Florian Weimer January 21, 2008 http://www.debian.org/security/faq -...
DSA-1473-1 scponly - arbitrary code execution
Bulletin has no description...
CVE-2007-6350
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including 1 unison, 2 rsync, 3 svn, and 4 svnserve, as originally demonstrated by creating a Subversion SVN repository with malicious hooks, then using svn ...
Design/Logic Flaw
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including 1 unison, 2 rsync, 3 svn, and 4 svnserve, as originally demonstrated by creating a Subversion SVN repository with malicious hooks, then using svn ...
CVE-2007-6350
scponly 4.6 and earlier allows remote authenticated users to bypass intended restrictions and execute code by invoking dangerous subcommands including 1 unison, 2 rsync, 3 svn, and 4 svnserve, as originally demonstrated by creating a Subversion SVN repository with malicious hooks, then using svn ...
CVE-2004-1162
CVE-2004-1162 affects the scponly package (before 4.0) where the unison command does not properly restrict which programs can be run. This can allow remote authenticated users to bypass intended access restrictions and execute arbitrary programs via the -rshcmd or -sshcmd flags. Documented impact...