8018 matches found
RHEL 8 : virt:rhel (RHSA-2019:1580)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2019:1580 advisory. The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems...
A vulnerability exists in the package management subsystem of the Cisco NX-OS network operating system, allowing a malicious actor to execute arbitrary commands.
The vulnerability in the package management subsystem of the Remote Package Manager RPM of the Cisco NX-OS network operating system in Cisco devices is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability could allow an attacker to execute...
Scientific Linux Security Update : libvirt on SL7.x x86_64 (20190620)
Security Fixes : - libvirt: arbitrary file read/exec via virDomainSaveImageGetXMLDesc API CVE-2019-10161 - libvirt: virDomainManagedSaveDefineXML API exposed to readonly clients CVE-2019-10166 - libvirt: arbitrary command execution via virConnectGetDomainCapabilities API CVE-2019-10167 - libvirt:...
libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs
The virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU libvirt APIs accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an...
Important: Red Hat Security Advisory: virt:rhel security update
An update for the virt:rhel module is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
libvirt: arbitrary command execution via virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU APIs
The virConnectBaselineHypervisorCPU and virConnectCompareHypervisorCPU libvirt APIs accept an "emulator" argument to specify the program providing emulation for a domain. Since v1.2.19, libvirt will execute that program to probe the domain's capabilities. Read-only clients could specify an...
Important: Red Hat Security Advisory: libvirt security and bug fix update
An update for libvirt is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...
CVE-2019-12491
OnApp before 5.0.0-88, 5.5.0-93, and 6.0.0-196 allows an attacker to run arbitrary commands with root privileges on servers managed by OnApp for XEN/KVM hypervisors. To exploit the vulnerability an attacker has to have control of a single server on a given cloud e.g. by renting one. From the sour...
The vulnerability of the Python script subsystem of the NX-OS network operating system allows a hacker to execute arbitrary commands and increase their privileges.
The vulnerability of the Python script subsystem in the NX-OS network operating system is related to deficiencies in access control. Exploiting this vulnerability allows an attacker to execute arbitrary commands and increase their privileges...
The vulnerability of the command-line interface of networking operating systems NX-OS and FX-OS allows attackers to escalate their privileges and execute arbitrary commands.
The vulnerability of the command-line interface of networking operating systems NX-OS and FX-OS is related to insufficient checking of arguments passed to certain CLI commands. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary commands...
The vulnerability of the command-line interface of networking operating systems FX-OS and NX-OS allows attackers to escalate their privileges and execute arbitrary commands.
The vulnerability of the command-line interface of networking operating systems FX-OS and NX-OS is related to insufficient checking of arguments passed to certain CLI commands. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute arbitrary commands...
OrangeHRM Arbitrary Command Injection Vulnerability
OrangeHRM is a human resource management system HRM from OrangeHRM, Inc. in the United States. The system supports personnel information management, leave management, attendance management and recruitment management. A command injection vulnerability exists in admin/listMailConfiguration in...
CVE-2019-12840
Summary of CVE-2019-12840 details (Webmin): An authenticated user in the Webmin Webmin Package Updates module could run arbitrary commands as root by sending a crafted data parameter to update.cgi, affecting Webmin versions up to 1.910. This vulnerability enables remote command execution with hig...
CVE-2019-12839
In OrangeHRM 4.3.1 and before, there is an input validation error within admin/listMailConfiguration txtSendmailPath parameter that allows authenticated attackers to achieve arbitrary command execution...
Adobe ColdFusion Command Injection Vulnerability
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. A command injection vulnerability exists in Adobe ColdFusion 2018 Update 4 and earlier, ColdFusion 2016...
Sql injection
SQL injection vulnerability in Apache Fineract before 1.3.0 allows attackers to execute arbitrary SQL commands via a query on the GroupSummaryCounts related table...
McAfee Agent 5.0.x / 5.5.0 / 5.5.1 Multiple Vulnerabilities (SB10260)
The version of McAfee Agent, formerly McAfee ePolicy Orchestrator ePO Agent, installed on the remote host is 5.0.x, 5.5.0, or 5.5.1. It is, therefore, affected by multiple vulnerabilities. These include an arbitrary command execution and potentially a remote code execution vulnerability. A local...
The vulnerability of the command-line interface implementation of the network operating system NX-OS allows a attacker to execute arbitrary commands on the underlying operating system.
The vulnerability of the command-line interface implementation of the networking operating system NX-OS exists due to the lack of measures taken to neutralize the special elements used in the operating system’s commands. Exploiting this vulnerability can allow an attacker to execute arbitrary...
The vulnerability of the command-line interface implementation of the network operating system NX-OS allows a attacker to execute arbitrary commands with root privileges.
The vulnerability of the command-line interface implementation of the NX-OS network operating system is caused by buffer overflow. Exploiting this vulnerability can allow an attacker to execute arbitrary commands with root privileges...