6808 matches found
CVE-2016-4572
CVE-2016-4572 affects Cloudera CDH versions prior to 5.7.1, where Impala REVOKE ALL ON SERVER commands fail to revoke all privileges. The risk is that some privileges may remain active for affected roles/services. The connected Red Hat and CNVD entries corroborate the same description. No explici...
PT-2019-7825
Name of the Vulnerable Software and Affected Versions Cloudera CDH versions prior to 5.7.1 Description The issue concerns Impala REVOKE ALL ON SERVER commands in Cloudera CDH, where these commands do not revoke all privileges as expected. Recommendations For versions prior to 5.7.1, update to...
CVE-2016-4572: Incorrect Authorization
In Cloudera CDH before 5.7.1, Impala REVOKE ALL ON SERVER commands do not revoke all privileges...
CVE-2018-2025
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...
sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword
A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...
Prototype Pollution
Overview All versions of reggae are vulnerable to prototype pollution. The function set does not restrict the modification of an Object's prototype, which may allow a malicious to add or modify an existing property that will exist on all objects. Recommendation No fix is currently available...
sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword
A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...
IBM UrbanCode Deploy File Download Vulnerability
IBM UrbanCode Deploy UCD is a set of application automation deployment tools from IBM in the United States. The tool is based on an application deployment automation management information model, and through remote agent technology, to realize the complex application in different environments, su...
PT-2020-10462
Name of the Vulnerable Software and Affected Versions PyYAML versions 5.1 through 5.1.2 Description The issue is related to insufficient restrictions on the load and load all functions in PyYAML due to a class deserialization problem. This can be exploited, for example, through the Popen class in...
CVE-2012-1157: Incorrect Default Permissions
Moodle before 2.2.2 has a default repository capabilities issue where all repositories are viewable by all users by default...
Microsoft Edge Security Bypass Vulnerability (CNVD-2019-42801)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge EdgeHTML-based, which arises from the program failing to properly handle extension requests and failing to request host privileges for...
visagehall.ru Cross Site Scripting vulnerability
Security Researcher g0bl1nsec Helped patch 3650 vulnerabilities Received 4 Coordinated Disclosure badges Received 3 recommendations , a holder of 4 badges for responsible and coordinated disclosure, found a security vulnerability affecting visagehall.ru website and its users. Following coordinate...
Atlassian Confluence 6.15.1 Directory Traversal
Exploit Title: Atlassian Confluence 6.15.1 - Directory Traversal Google Dork: N/A Date: 2019-11-11 Exploit Author: max7253 Vendor Homepage: https://www.atlassian.com Software Link: https://www.atlassian.com/software/confluence/download-archives Version: 6.15.1 Tested on: Microsoft Windows 7...
NVIDIA Virtual GPU Manager vGPU Component Input Validation Error Vulnerability
NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. An input validation error vulnerability exists in the vGPU plugin in NVIDIA Virtual GPU Manager all versions, which stems from the program failing to properly validate...
Unspecified Vulnerability in NVIDIA Virtual GPU Manager
NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. A security vulnerability exists in NVIDIA Virtual GPU Manager all versions, which can be exploited by attackers to disclose information or cause a denial of service...
sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword
A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...
sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword
A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...
sudo: Privilege escalation via 'Runas' specification with 'ALL' keyword
A flaw was found in the way sudo implemented running commands with arbitrary user ID. If a sudoers entry is written to allow the attacker to run a command as any user except root, this flaw can be used by the attacker to bypass that restriction...
Powershell Profile Persistence
This module establishes persistence by modifying a PowerShell profile script, which is automatically executed when PowerShell starts. The module supports multiple profile scopes current user or all users and safely backs up any existing profile prior to modification, enabling clean removal by...
RHEL 7 : sudo (RHSA-2019:3278)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2019:3278 advisory. The sudo packages contain the sudo utility which allows system administrators to provide certain users with the permission to execute privileged...