2197 matches found
SUSE-SU-2019:2656-1 Security update for sudo
This update for sudo fixes the following issue: - CVE-2019-14287: Fixed an issue where a user with sudo privileges that allowed them to run commands with an arbitrary uid, could run commands as root, despite being forbidden to do so in sudoers bsc1153674...
UBUNTU-CVE-2019-14287
In Sudo before 1.8.28, an attacker with access to a Runas ALL sudoer account can bypass certain policy blacklists and session PAM modules, and can cause incorrect logging, by invoking sudo with a crafted user ID. For example, this allows bypass of !root configuration, and USER= logging, for a "su...
CVE-2019-9269
In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36899497...
Design/Logic Flaw
In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36899497...
CVE-2019-9269
In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36899497...
CVE-2019-9269
CVE-2019-9269 is an Android 10 elevation-of-privilege issue described as a local permissions bypass in System Settings caused by a cached Linux user ID. The vulnerability could allow a local attacker to bypass permissions with no additional execution privileges required; exploitation reportedly r...
PT-2019-19489
Name of the Vulnerable Software and Affected Versions Android versions Android-10 Description In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is...
CVE-2019-9269: Insufficient Session Expiration
In System Settings, there is a possible permissions bypass due to a cached Linux user ID. This could lead to a local permissions bypass with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-36899497...
Information Disclosure
mediawiki/core is vulnerable to information disclosure. Suppressed usernames are disclosed via a User ID lookup in the Special:Redirect function...
CVE-2019-16738
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...
CVE-2019-16738
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...
Information disclosure
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...
CVE-2019-16738
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...
CVE-2019-16738
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...
CVE-2019-16738
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...
CVE-2019-16738
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...
CVE-2019-16738: Missing Authorization
In MediaWiki through 1.33.0, Special:Redirect allows information disclosure of suppressed usernames via a User ID Lookup...
PT-2019-7800
Name of the Vulnerable Software and Affected Versions wp-invoice plugin versions prior to 4.1.1 Description The issue is related to incorrect access control in the wp-invoice plugin, specifically over the wpi user id variable for invoice retrieval. Recommendations For versions prior to 4.1.1,...
PT-2019-13178
Name of the Vulnerable Software and Affected Versions Knowage versions prior to 6.1.2 Description The issue allows for XSS via the start url or user id field to the "ChangePwdServlet" page. Recommendations For versions prior to 6.1.2, update to version 6.1.2 or later to resolve the issue...
CVE-2019-4448
IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpumdebug binaries are setuid root and have built-in options that allow an low privileged user the ability to load arbitrary db2 libraries from a privileged context. This...