CVE-2020-5855

When the Windows Logon Integration feature is configured for all versions of BIG-IP Edge Client for Windows, unauthorized users who have physical access to an authorized user's machine can get shell access under unprivileged user...

The vulnerability of the MMS All software component for Oracle Hospitality Cruise Materials Management allows a hacker to gain unauthorized access to protected information.

The vulnerability of the MMS All software component for Oracle Hospitality Cruise Materials Management is related to lack of access control. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword

A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...

CVE-2019-3683

The keystone-json-assignment package in SUSE Openstack Cloud 8 before commit d7888c75505465490250c00cc0ef4bb1af662f9f every user listed in the /etc/keystone/user-project-map.json was assigned full "member" role access to every project. This allowed these users to access, modify, create and delete...

Oracle Hospitality Cruise Materials Management Unauthorized Access Vulnerability

Oracle Hospitality Cruise Materials Management gives shore management complete transparency and control over all consumables required for cruise ship operations. An unspecified vulnerability exists in the MMS All component in Oracle Hospitality Cruise Materials Management 7.30.567. An attacker...

XSS Vulnerability in Microplatform All-in-One System

SenDong Micro platform all-in-one station building system is the first all-in-one station building system based on SAAS architecture. XSS vulnerability exists in SenDong Micro platform all-in-one website builder system, which can be exploited by attackers to obtain website cookie information...

CVE-2019-6319

The CVE-2019-6319 entry describes a Cross-Site Request Forgery (CSRF) vulnerability in HP DeskJet 3630 All-in-One Printers (models F5S43A–F5S57A, K4T93A–K4T99C, K4U00B–K4U03B, V3F21A–V3F22A) with firmware SWP1FN1912BR or higher. The vulnerability could allow a denial of service or device misconfi...

All K Song has a dll hijacking vulnerability

All K Song is a Tencent's K song software based on socialization of acquaintances, to meet friends with songs, singing life happily. It supports QQ and WeChat login, song ordering, song recording, MV recording, tuning, work saving and publishing. There is a dll hijacking vulnerability in the clie...

Micro Focus AcuToWeb Information Disclosure Vulnerability

Micro Focus AcuToWeb is a suite of web and mobile deployment solutions for ACUCOBOL applications from Micro Focus UK. An information disclosure vulnerability exists in Micro Focus AcuToWeb all supported versions. An attacker could exploit this vulnerability to enumerate files on the file system...

CVE-2019-19981

The WordPress plugin, Email Subscribers & Newsletters, before 4.2.3 had a flaw that allowed for CSRF to be exploited on all plugin settings...

How Organizations Can Defend Against Advanced Persistent Threats

Advanced persistent threats APTs have emerged to be legitimate concerns for all organizations. APTs are threat actors that breach networks and infrastructures and stealthily lurk within them over extended spans of time. They typically perform complex hacks that allow them to steal or destroy data...

DEBIAN-CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

UBUNTU-CVE-2012-6111

gnome-keyring does not discard stored secrets when using gnomekeyringlockallsync function...

Apple Opens Its Invite-Only Bug Bounty Program to All Researchers

As promised by Apple in August this year, the company today finally opened its bug bounty program to all security researchers, offering monetary rewards to anyone for reporting vulnerabilities in the iOS, macOS, watchOS, tvOS, iPadOS, and iCloud to the company. Since its launch three years ago,...

DEBIAN-CVE-2019-19234

In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of a password hash is not considered, allowing an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The software maintainer believes...

UBUNTU-CVE-2019-19234

In Sudo through 1.8.29, the fact that a user has been blocked e.g., by using the ! character in the shadow file instead of a password hash is not considered, allowing an attacker who has access to a Runas ALL sudoer account to impersonate any blocked user. NOTE: The software maintainer believes...

UBUNTU-CVE-2019-19232

In Sudo through 1.8.29, an attacker with access to a Runas ALL sudoer account can impersonate a nonexistent user by invoking sudo with a numeric uid that is not associated with any user. NOTE: The software maintainer believes that this is not a vulnerability because running a command via sudo as ...

PT-2019-4664 · Todd Miller +4 · Sudo +4

Name of the Vulnerable Software and Affected Versions: Sudo versions 1.8.29 and earlier Description: The issue is related to the sudoer account with Runas ALL privileges, allowing an attacker to impersonate a nonexistent user by invoking sudo with a numeric uid not associated with any user. This...

ALPINE-CVE-2019-19582

An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service infinite loop because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration over all bits involves functions which...

UBUNTU-CVE-2019-19582

An issue was discovered in Xen through 4.12.x allowing x86 guest OS users to cause a denial of service infinite loop because certain bit iteration is mishandled. In a number of places bitmaps are being used by the hypervisor to track certain state. Iteration over all bits involves functions which...