Lucene search
+L

3412 matches found

Cisco
Cisco
•added 2019/05/15 4:00 p.m.•155 views

Cisco NX-OS Software Bash Bypass Guest Shell Vulnerability

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell. The attacker must...

6CVSS6.4AI score0.00402EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/05/15 12:00 a.m.•8 views

PT-2019-2289

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software affected versions not specified Description A vulnerability in the Bash shell implementation could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands...

7.2CVSS0.00402EPSS
SaveExploits0References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/05/15 12:00 a.m.•7 views

CVE-2019-1730: Undefined Security Weakness

A vulnerability in the Bash shell implementation for Cisco NX-OS Software could allow an authenticated, local attacker to bypass the limited command set of the restricted Guest Shell and execute commands at the privilege level of a network-admin user outside of the Guest Shell. The attacker must...

7.2CVSS6.1AI score0.00402EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/05/14 12:00 a.m.•31 views

Photon OS 1.0: Bash PHSA-2019-1.0-0229

An update of the bash package has been released. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2019-1.0-0229. The text itself is copyright C VMware, Inc. include"compat.inc"; if description scriptid124869;...

7.8CVSS0.1AI score0.00402EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2019/05/14 12:00 a.m.•155 views

EulerOS Virtualization 3.0.1.0 : bash (EulerOS-SA-2019-1418)

According to the versions of the bash package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was found that the fix for CVE-2014-6271 was incomplete, and Bash still allowed certain characters to be injected into other...

10CVSS7.7AI score0.99999EPSS
SaveExploits151References7
OSV
OSV
•added 2019/05/12 9:35 a.m.•12 views

MGASA-2019-0163 Updated bash packages fix security vulnerability

Updated bash package fixes security vulnerability: A vulnerability in which shell did not prevent user BASHCMDS, allowing the user to execute any command with the permissions of the shell CVE-2019-9924...

7.8CVSS7.9AI score0.00402EPSS
SaveExploits0References3
Mageia
Mageia
•added 2019/05/12 9:35 a.m.•43 views

Updated bash packages fix security vulnerability

Updated bash package fixes security vulnerability: A vulnerability in which shell did not prevent user BASHCMDS, allowing the user to execute any command with the permissions of the shell CVE-2019-9924...

7.8CVSS2.5AI score0.00402EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
•added 2019/05/10 2:35 p.m.•41 views

Security Bulletin: Vulnerabilities in Bash affect QRadar SIEM, QRadar Vulnerability Manager, QRadar Risk Manager, and QRadar Incident Forensics (CVE-2014-6271, CVE-2014-7169, CVE-2014-7186, CVE-2014-7187, CVE-2014-6277, CVE-2014-6278)

Summary Six Bash vulnerabilities were disclosed in September 2014. This bulletin addresses the vulnerabilities that have been referred to as “Bash Bug” or “Shellshock” and two memory corruption vulnerabilities. Bash is used by IBM QRadar SIEM, IBM QRadar Vulnerability Manager, IBM QRadar Risk...

10CVSS8.3AI score0.99999EPSS
SaveExploits169Affected Software1
Veracode
Veracode
•added 2019/05/02 5:51 a.m.•33 views

Privilege Escalation

Bash is vulnerable to privilege escalation. This allows to local authenticated user to inject arbitrary commands via crafted SHELLOPTS and PS4 environment variables leading to data modification and disclosure of information...

8.4CVSS7.7AI score0.00576EPSS
SaveExploits0References18Affected Software1
Veracode
Veracode
•added 2019/05/02 5:11 a.m.•38 views

Arbitrary Code Execution

bash is vulnerable to arbitrary code execution. The vulnerability exists through the use of here documents, related to the redirstack issue...

10CVSS7.8AI score0.9994EPSS
SaveExploits33References130Affected Software1
Veracode
Veracode
•added 2019/05/02 5:11 a.m.•35 views

Arbitrary Code Execution

bash is vulnerable to arbitrary code execution. The vulnerability exists in the readtokenword function where deeply nested for loops can cause arbitrary code execution...

10CVSS7.8AI score0.9994EPSS
SaveExploits33References128Affected Software1
Photon
Photon
•added 2019/04/29 12:00 a.m.•38 views

Home Download Photon OS User Documentation FAQ Security Advisories Related Information Lightwave - PHSA-2019-1.0-0229

An update of 'bash' packages of Photon OS has been released...

7.2CVSS0.9AI score0.00402EPSS
SaveExploits0
Photon
Photon
•added 2019/04/29 12:00 a.m.•50 views

Important Photon OS Security Update - PHSA-2019-0229

Updates of 'bash' packages of Photon OS have been released...

7.8CVSS1.7AI score0.00402EPSS
SaveExploits0
OSV
OSV
•added 2019/04/26 5:29 p.m.•11 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS7.5AI score0.01832EPSS
SaveExploits0References2
NVD
NVD
•added 2019/04/26 5:29 p.m.•22 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS9AI score0.01832EPSS
SaveExploits0References2
UbuntuCve
UbuntuCve
•added 2019/04/26 5:29 p.m.•35 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS7.2AI score0.01832EPSS
SaveExploits0References2
OSV
OSV
•added 2019/04/26 5:29 p.m.•24 views

UBUNTU-CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS7.5AI score0.01832EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2019/04/26 4:13 p.m.•45 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9AI score0.01832EPSS
SaveExploits0References2
CVE
CVE
•added 2019/04/26 4:13 p.m.•137 views

CVE-2019-9804

CVE-2019-9804 is a macOS-specific issue in Firefox Developer Tools where pasting the output of the ‘Copy as cURL’ command could cause the execution of unintended additional bash commands if the URL was maliciously crafted. The root cause is tied to how the native Bash on macOS handles the pasted ...

9.8CVSS8.8AI score0.01832EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2019/04/26 4:13 p.m.•58 views

CVE-2019-9804

In Firefox Developer Tools it is possible that pasting the result of the 'Copy as cURL' command into a command shell on macOS will cause the execution of unintended additional bash script commands if the URL was maliciously crafted. This is the result of an issue with the native version of Bash o...

9.8CVSS9.5AI score0.01832EPSS
SaveExploits0
Rows per page
Query Builder