290 matches found
CVE-2012-1156
Moodle before 2.2.2 has users' private files included in course backups Versions 2.2 to 2.2.1+, 2.1 to 2.1.4+, 2.0 to 2.0.7+ are affected...
Moderate: Red Hat Security Advisory: kernel security and bug fix update
An update for kernel is now available for Red Hat Enterprise Linux 6.5 Advanced Update Support. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
vdsm: privilege escalation to root via systemd_run
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemdrun function exposed to the vdsm system user could be abused to execute arbitrary commands as root...
IBM DB2 Buffer Error Vulnerability
IBM DB2 is a set of relational database management system from IBM in the United States. The main execution environments for this system are UNIX, Linux, IBMi, z/OS, and Windows server versions. A buffer overflow vulnerability exists in db2pdcfg in IBM Db2, which stems from the program's failure ...
CVE-2019-11005
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a stack-based buffer overflow in the function SVGStartElement of coders/svg.c, which allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a quoted font family value...
Tcpreplay Design Error Vulnerability (CNVD-2019-34847)
Tcpreplay is a set of open source utilities for editing and replaying network traffic for UNIX based operating systems. Tcpreplay suffers from a design error vulnerability. An attacker could exploit this vulnerability to cause a denial of service or other attack...
Microsoft Windows 10: Create symbolic links
This user right determines if users can create a symbolic link from the device they are logged on to. A symbolic link is a file-system object that points to another file-system object. The object that is pointed to is called the target. Symbolic links are transparent to users. The links appear as...
Oracle Sun Solaris has an unspecified vulnerability (CNVD-2018-09049)
Oracle Sun Solaris is a Unix operating system originally developed by Sun Microsystems. An unspecified vulnerability exists in the Python modules component of Oracle Sun Solaris. An attacker could exploit this vulnerability to compromise confidentiality and integrity...
CVE-2017-2642
Moodle 3.x has user fullname disclosure on the user preferences page...
CVE-2017-10965
An issue was discovered in Irssi before 1.0.4. When receiving messages with invalid time stamps, Irssi would try to dereference a NULL pointer...
CVE-2016-1516
OpenCV 3.0.0 has a double free issue that allows attackers to execute arbitrary code...
Default Weak Password Vulnerability in Multiple Prologix Trango Products
Prologix Trango Apex Lynx and others are products of Prologix UAE.Apex Lynx is an outdoor microwave backhaul system.Apex Orion is a full-duplex point-to-point radio link for use in the Apex Lynx.The Apex Orion is a full-duplex point-to-point radio link for use in... A security vulnerability exist...
IBM AIX Remote Denial of Service Vulnerability
IBM AIX Advanced Interactive eXecutive is a UNIX operating system developed by IBM. A remote denial of service vulnerability exists in IBM AIX. An attacker could exploit this vulnerability to cause a denial of service...
Important: Red Hat Security Advisory: kernel security and bug fix update
Updated kernel packages that fix one security issue and one bug are now available for Red Hat Enterprise Linux 6.2 Advanced Update Support. The Red Hat Security Response Team has rated this update as having Important security impact. A Common Vulnerability Scoring System CVSS base score, which...
Apache 1.3 Artificially Long Slash Path Directory Listing Vulnerability (1)
No description provided by source. source: http://www.securityfocus.com/bid/2503/info Apache HTTPD is the Apache Web Server, freely distributed and actively maintained by the Apache Software Foundation. It is a freely available and widely used software package, included with various implementatio...
HP Tru64 4.0/5.0/5.1 _XKB_CHARSET Local Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5648/info Tru64 is a commercially available Unix operating system originally developed by Digital. It is distributed and maintained by HP. A buffer overflow has been discovered in the XKBCHARSET library. A number of...
IBM AIX 4.x setsenv Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2032/info AIX is a version of the UNIX Operating System distributed by IBM. A problem exists that could allow a user elevated priviledges. The problem occurs in the setsenv binary. It has been reported that a buffer...
IBM AIX 4.x enq Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2034/info AIX is a variant of the UNIX Operating System, distributed by IBM. A problem exists that may allow elevation of user priviledges. The problem occurs in the enq program. It is reported that an overflow exists in...
Caldera OpenServer 5.0.x XSCO Color Database File Heap Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/4985/info OpenServer is commercial Unix operating system originally developed by SCO, and distributed by Caldera. It may be possible for a local user to gain elevated privileges. When Xsco is executed, and an excessively...
IBM AIX 4.3 digest Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/2033/info AIX is a version of the UNIX Operating System distributed by IBM. A vulnerability exists in the operating system which could allow a user an elevation in priviledge. The problem occurs in the digest binary. It i...