697 matches found
Design/Logic Flaw
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...
CVE-2018-16962
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...
CVE-2018-16962
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...
CVE-2018-16962
CVE-2018-16962 affects Webroot SecureAnywhere on macOS prior to 9.0.8.34. The vulnerability arises from mishandling access to the product’s driver by a process that does not have root privileges, indicating a local privilege escalation risk through kernel-level access control weakness. Affected v...
PT-2018-13799
Name of the Vulnerable Software and Affected Versions Webroot SecureAnywhere versions prior to 9.0.8.34 Description The issue arises from the mishandling of access to the driver by a process lacking root privileges. Recommendations For versions prior to 9.0.8.34, update to version 9.0.8.34 or lat...
CVE-2018-16962: Write-what-where Condition
Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges...
CVE-2018-11245
app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes...
CVE-2018-11245
app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes...
CVE-2018-11245: Improper Neutralization of Input During Web Page Generation
app/webroot/js/misp.js in MISP 2.4.91 has a DOM based XSS with cortex type attributes...
CVE-2017-16802
In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added...
Design/Logic Flaw
In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added...
CVE-2017-16802
In the sharingGroupPopulateOrganisations function in app/webroot/js/misp.js in MISP 2.4.82, there is XSS via a crafted organisation name that is manually added...
CVE-2017-16660
Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path under the web root, and then making a remoteagent.php request containing PHP code in a Client-ip header...
CVE-2017-15216
MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...
CVE-2017-15216
MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...
CVE-2017-15216
MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...
PT-2017-13911
Name of the Vulnerable Software and Affected Versions MISP versions prior to 2.4.81 Description The issue is related to a potential reflected XSS in a quickDelete action used to delete a sighting. This is associated with specific files, including...
CVE-2017-15216: Improper Neutralization of Input During Web Page Generation
MISP before 2.4.81 has a potential reflected XSS in a quickDelete action that is used to delete a sighting, related to app/View/Sightings/ajax/quickDeleteConfirmationForm.ctp and app/webroot/js/misp.js...
Unitrends UEB 9.1 - Privilege Escalation Exploit
Exploit for php platform in category web applications Exploit Title: Authenticated lowpriv RCE for Unitrends UEB 9.1 Exploit Authors: Benny Husted, Jared Arave, Cale Smith Contact: https://twitter.com/iotennui || https://twitter.com/BennyHusted || https://twitter.com/0xC413 Vendor Homepage:...
Unitrends UEB 9.1 Privilege Escalation
Exploit Title: Authenticated lowpriv RCE for Unitrends UEB 9.1 Date: 08/08/2017 Exploit Authors: Benny Husted, Jared Arave, Cale Smith Contact: https://twitter.com/iotennui || https://twitter.com/BennyHusted || https://twitter.com/0xC413 Vendor Homepage: https://www.unitrends.com/ Software Link:...