7796 matches found
Fedora 25 : 1:dovecot (2017-6ef28e38d6)
quota: Add plugin quotamaxmailsize setting to limit the maximum individual mail size that can be saved. + imapc: Add imapcfeatures=delay-login. If set, connecting to the remote IMAP server isn't done until it's necessary. + imapc: Add imapcconnectionretrycount and imapcconnectionretryinterval...
CVE-2017-5045
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page...
Design/Logic Flaw
XSS Auditor in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android allowed detection of a blocked iframe load, which allowed a remote attacker to brute force JavaScript variables via a crafted HTML page...
Encrypt password variables in VARIABLE_CONTEXT and VARIABLE_BASELINE_ITEM tables
h3. Problem Definition Currently, Bamboo password variables are not encrypted in the VARIABLECONTEXT and VARIABLEBASELINEITEM tables, even though they are encrypted in VARIABLEDEFINITION h3. Suggested Solution Encrypt passwords in VARIABLECONTEXT and VARIABLEBASELINEITEM tables h3. Workaround...
Encrypt password variables in VARIABLE_CONTEXT and VARIABLE_BASELINE_ITEM tables
h3. Problem Definition Currently, Bamboo password variables are not encrypted in the VARIABLECONTEXT and VARIABLEBASELINEITEM tables, even though they are encrypted in VARIABLEDEFINITION h3. Suggested Solution Encrypt passwords in VARIABLECONTEXT and VARIABLEBASELINEITEM tables h3. Workaround...
VirtualBox: unprivileged host user -> host kernel privesc via environment and ioctl (CVE-2017-3561)
This bug report describes two separate issues that, when combined, allow any user on a Linux host system on which VirtualBox is installed to gain code execution in the kernel. Since I'm not sure which one of these issues crosses something you consider to be a privilege boundary, I'm reporting the...
CVE-2016-4869
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed...
Session fixation
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed...
CVE-2016-4869
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed...
CVE-2016-4869
Cybozu Office 9.0.0 to 10.4.0 allow remote attackers to obtain session information via a page where CGI environment variables are displayed...
CVE-2016-4869
CVE-2016-4869 (Cybozu Office) : Cybozu Office versions 9.0.0–10.4.0 contain an information disclosure vulnerability where a page displaying CGI environment variables can leak session information. An unauthenticated remote attacker may obtain a user’s session data via that page. The issue’s impact...
PonyOS 4.0 fluttershy LD_LIBRARY_PATH Privilege Escalation
!/usr/bin/python PonyOS 4.0 has added several improvements over previous releases including support for setuid binaries and dynamic libraries. The run-time linker does not sanitize environment variables when running setuid files allowing for local root exploitation through manipulated...
DEBIAN-CVE-2016-10122
Firejail does not properly clean environment variables, which allows local users to gain privileges...
CVE-2016-10122
Firejail does not properly clean environment variables, which allows local users to gain privileges...
CVE-2016-10122
Firejail does not properly clean environment variables, which allows local users to gain privileges...
Code injection
Firejail does not properly clean environment variables, which allows local users to gain privileges...
UBUNTU-CVE-2016-10122
Firejail does not properly clean environment variables, which allows local users to gain privileges...
CVE-2016-10122
Firejail does not properly clean environment variables, which allows local users to gain privileges...
CVE-2016-10122
Summary of CVE-2016-10122 : The vulnerability affects the Firejail project, where the software does not properly clean environment variables. The underlying root cause is the incomplete sanitization of environment variables, enabling local users to gain privileges. The issue is described consiste...
CVE-2016-10122
Firejail does not properly clean environment variables, which allows local users to gain privileges...