Lucene search
+L

16 matches found

Cvelist
Cvelist
added 2026/08/18 8:53 p.m.22 views

CVE-2026-52817 Linuxfabrik Monitoring Plugins Sudoers: /usr/bin/apt-get arguments allow privilege escalation

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 5.1.0, the shipped assets/sudoers/Debian.sudoers policy allowed the nagios or icinga account to execute /usr/bin/apt-get as root without restricting its arguments. An attacker who...

8.4CVSS0.00188EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/18 8:53 p.m.55 views

CVE-2026-52817

In Linuxfabrik Monitoring Plugins prior to 5.1.0, the Debian.sudoers file allowed the nagios/icinga account to run /usr/bin/apt-get as root with unrestricted arguments. An attacker with the monitoring account can execute sudo apt-get update -o APT::Update::Pre-Invoke::="/bin/sh" to obtain a root ...

8.4CVSS5.6AI score0.00188EPSS
SaveExploits0References4
EUVD
EUVD
added 2025/10/03 8:07 p.m.13 views

EUVD-2022-53458

Malicious code in bioql PyPI...

7.5CVSS7.5AI score0.00685EPSS
SaveExploits0References2
CNVD
CNVD
added 2022/06/15 12:00 a.m.25 views

Siemens SINEMA Remote Connect Server Parameter Handling Error Vulnerability

SINEMA Remote Connect is a remote network management platform that makes it easy to manage tunnel connections VPNs between headquarters, service technicians, and installed machines or plants.A parameter handling error vulnerability exists in Siemens SINEMA Remote Connect Server, which stems from ...

7.5CVSS2AI score0.00685EPSS
SaveExploits0References1
OSV
OSV
added 2022/06/14 10:15 a.m.11 views

CVE-2022-32261

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application...

7.5CVSS5.7AI score0.00685EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2022/06/14 10:15 a.m.1 views

CVE-2022-32261

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application...

7.5CVSS5.4AI score0.00685EPSS
SaveExploits0References3
NVD
NVD
added 2022/06/14 10:15 a.m.22 views

CVE-2022-32261

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application...

7.5CVSS0.00685EPSS
SaveExploits0References2
Prion
Prion
added 2022/06/14 10:15 a.m.21 views

Design/Logic Flaw

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application...

5CVSS7.8AI score0.00685EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/06/14 9:22 a.m.14 views

CVE-2022-32261

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application...

5.3CVSS6.7AI score0.00685EPSS
SaveExploits0References2
CVE
CVE
added 2022/06/14 9:22 a.m.83 views

CVE-2022-32261

CVE-2022-32261 affects Siemens SINEMA Remote Connect Server (all versions prior to V3.1). The vulnerability stems from a misconfiguration in the APT update mechanism that could allow an attacker to add insecure update packages to the application. The issue is documented across multiple sources an...

7.5CVSS7.3AI score0.00685EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2022/06/14 9:22 a.m.29 views

CVE-2022-32261

A vulnerability has been identified in SINEMA Remote Connect Server All versions V3.1. The affected application contains a misconfiguration in the APT update. This could allow an attacker to add insecure packages to the application...

5.3CVSS7.5AI score0.00685EPSS
SaveExploits0References2
OSV
OSV
added 2020/12/10 12:00 a.m.28 views

DLA-2487-1 apt - security update

Bulletin has no description...

5.7CVSS5.4AI score0.00377EPSS
SaveExploits0
OSV
OSV
added 2020/05/14 12:00 a.m.25 views

DSA-4685-1 apt - security update

Bulletin has no description...

5.5CVSS5.3AI score0.01305EPSS
SaveExploits1
OSV
OSV
added 2020/01/23 12:00 a.m.30 views

DLA-2074-1 python-apt - security update

Bulletin has no description...

4.7CVSS4.5AI score0.00509EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2016/12/14 12:00 a.m.40 views

Debian DSA-3733-1 : apt - security update

Jann Horn of Google Project Zero discovered that APT, the high level package manager, does not properly handle errors when validating signatures on InRelease files. An attacker able to man-in-the-middle HTTP requests to an apt repository that uses InRelease files clearsigned Release files, can ta...

5.9CVSS5.4AI score0.07308EPSS
SaveExploits3References3
Debian
Debian
added 2014/09/23 5:05 p.m.65 views

[SECURITY] [DLA 58-1] apt security update

Package : apt Version : 0.8.10.3+squeeze5 CVE ID : CVE-2014-6273 The Google Security Team discovered a buffer overflow vulnerability in the HTTP transport code in apt-get. An attacker able to man-in-the-middle a HTTP request to an apt repository can trigger the buffer overflow, leading to a crash...

6.8CVSS9.7AI score0.02437EPSS
SaveExploits0
Rows per page
Query Builder