Lucene search
+L

6152 matches found

OSV
OSV
•added 2016/05/14 3:59 p.m.•16 views

CVE-2016-2016

Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user:...

5.5CVSS5.8AI score0.00457EPSS
SaveExploits0References2
NVD
NVD
•added 2016/05/14 3:59 p.m.•26 views

CVE-2016-2016

Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user:...

5.5CVSS5.5AI score0.00457EPSS
SaveExploits0References2
Prion
Prion
•added 2016/05/14 3:59 p.m.•23 views

Design/Logic Flaw

Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user:...

2.1CVSS6.9AI score0.00457EPSS
SaveExploits0References2Affected Software3
Cvelist
Cvelist
•added 2016/05/14 3:00 p.m.•32 views

CVE-2016-2016

Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user:...

5.4AI score0.00457EPSS
SaveExploits0References2
CVE
CVE
•added 2016/05/14 3:00 p.m.•55 views

CVE-2016-2016

CVE-2016-2016 affects HP-UX 11iv3 with Base-VxFS 5.0/5.0.1/5.1SP1. The issue is in VxFS ACL inheritance where default:class:, default:other:, and default:user: entries can be bypassed via configuration of a parent directory, allowing local users to bypass intended access restrictions. Vulnerable ...

5.5CVSS5.4AI score0.00457EPSS
SaveExploits0References2Affected Software3
Positive Technologies
Positive Technologies
•added 2016/05/14 12:00 a.m.•3 views

PT-2016-4964

Name of the Vulnerable Software and Affected Versions Base-VxFS-50 versions B.05.00.01 through B.05.00.02 Base-VxFS-501 versions B.05.01.0 through B.05.01.03 Base-VxFS-51 versions B.05.10.00 through B.05.10.02 Description The issue concerns the mishandling of ACL inheritance for certain entries,...

5.5CVSS0.00457EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2016/05/14 12:00 a.m.•9 views

CVE-2016-2016: Improper Access Control

Base-VxFS-50 B.05.00.01 through B.05.00.02, Base-VxFS-501 B.05.01.0 through B.05.01.03, and Base-VxFS-51 B.05.10.00 through B.05.10.02 on HPE HP-UX 11iv3 with VxFS 5.0, VxFS 5.0.1, and VxFS 5.1SP1 mishandles ACL inheritance for default:class: entries, default:other: entries, and default:user:...

5.5CVSS6AI score0.00457EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/05/13 12:00 a.m.•15 views

MariaDB Server 10.1.x < 10.1.9 Multiple DoS Vulnerabilities

Binary data 9290.prm...

7.3AI score
SaveExploits0References3
Tenable Nessus
Tenable Nessus
•added 2016/05/10 12:00 a.m.•946 views

BMC Server Automation RSCD Agent Weak ACL XML-RPC Arbitrary Command Execution

The RSCD agent running on the remote host does not have access controls in place to prevent an attacker from executing XML-RPC commands. An unauthenticated, remote attacker can exploit this to execute arbitrary commands in the context of the user in which the connections are mapped. C Tenable...

6AI score
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2016/05/10 12:00 a.m.•414 views

BMC Server Automation RSCD Agent ACL Bypass

The remote BMC BladeLogic Server Automation BSA RSCD agent is affected by a security bypass vulnerability due to a failure to properly enforce the ACL. An unauthenticated, remote attacker can exploit this, by ignoring the response to the RemoteServer.info request, to bypass the ACL and execute...

7.5CVSS6.6AI score0.74618EPSS
SaveExploits14References8
Tenable Nessus
Tenable Nessus
•added 2016/05/04 12:00 a.m.•61 views

Debian DLA-455-1 : asterisk security update

CVE-2014-6610 Asterisk Open Source 11.x before 11.12.1 and 12.x before 12.5.1 and Certified Asterisk 11.6 before 11.6-cert6, when using the resfaxspandsp module, allows remote authenticated users to cause a denial of service crash via an out of call message, which is not properly handled in the...

9CVSS7.9AI score0.46004EPSS
SaveExploits1References8
NVD
NVD
•added 2016/05/02 10:59 a.m.•43 views

CVE-2016-2854

The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.8CVSS7.5AI score0.0095EPSS
SaveExploits4References4
OSV
OSV
•added 2016/05/02 10:59 a.m.•16 views

CVE-2016-2854

The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.8CVSS6.7AI score
SaveExploits0References4
OSV
OSV
•added 2016/05/02 10:59 a.m.•16 views

CVE-2016-1575

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.8CVSS7.4AI score
SaveExploits0References6
NVD
NVD
•added 2016/05/02 10:59 a.m.•22 views

CVE-2016-1575

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.8CVSS7.3AI score0.00923EPSS
SaveExploits3References6
Prion
Prion
•added 2016/05/02 10:59 a.m.•27 views

Directory traversal

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.2CVSS6.7AI score0.00923EPSS
SaveExploits3References6Affected Software4
OSV
OSV
•added 2016/05/02 10:59 a.m.•18 views

UBUNTU-CVE-2016-2854

The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.8CVSS6.8AI score0.0095EPSS
SaveExploits4References5
UbuntuCve
UbuntuCve
•added 2016/05/02 10:59 a.m.•45 views

CVE-2016-2854

The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.8CVSS6.8AI score0.0095EPSS
SaveExploits4References4
Prion
Prion
•added 2016/05/02 10:59 a.m.•29 views

Directory traversal

The aufs module for the Linux kernel 3.x and 4.x does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

4.6CVSS6.9AI score0.0095EPSS
SaveExploits4References4Affected Software1
Cvelist
Cvelist
•added 2016/05/02 10:00 a.m.•56 views

CVE-2016-1575

The overlayfs implementation in the Linux kernel through 4.5.2 does not properly maintain POSIX ACL xattr data, which allows local users to gain privileges by leveraging a group-writable setgid directory...

7.3AI score0.00923EPSS
SaveExploits3References6
Rows per page
Query Builder