Lucene search
+L

230 matches found

OSV
OSV
added 2022/03/17 12:15 p.m.26 views

CVE-2021-23556

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...

8CVSS6.9AI score
SaveExploits0References5
OSV
OSV
added 2022/03/17 12:15 p.m.33 views

PYSEC-2022-165

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...

8CVSS3.8AI score0.0113EPSS
SaveExploits1References6
PyPA
PyPA
added 2022/03/17 12:15 p.m.8 views

PYSEC-2022-165

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...

8CVSS7AI score0.0113EPSS
SaveExploits1References6Affected Software1
Cvelist
Cvelist
added 2022/03/17 11:20 a.m.24 views

CVE-2021-23556 Exposed Dangerous Method or Function

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...

6.4CVSS8.1AI score0.0113EPSS
SaveExploits1References5
Debian CVE
Debian CVE
added 2022/03/17 11:20 a.m.84 views

CVE-2021-23556

The package guake before 3.8.5 are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via the d-bus method. Note: Exploitation...

8CVSS7.9AI score0.0113EPSS
SaveExploits1
CVE
CVE
added 2022/03/17 11:20 a.m.115 views

CVE-2021-23556

Guake is vulnerable before version 3.8.5 to Exposed Dangerous Method or Function due to exposure of execute_command and execute_command_by_uuid via the D-Bus interface, allowing a malicious user to run an arbitrary command. Exploitation requires the attacker to have or trigger another malicious p...

8CVSS7AI score0.0113EPSS
SaveExploits1References5Affected Software1
CNNVD
CNNVD
added 2022/03/17 12:0 a.m.7 views

guake 安全漏洞

guake is a python-based drop-down terminal designed for the GNOME desktop environment. A security vulnerability exists in guake that stems from guake exposing the executecommand and executecommandbyuuid methods via the d-bus interface, which allows a malicious user to run arbitrary commands via t...

8CVSS7.8AI score0.0113EPSS
SaveExploits1References5
AlmaLinux
AlmaLinux
added 2022/03/15 9:12 a.m.21 views

firewalld bug fix and enhancement update

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Bug Fixes and Enhancements: firewall-cmd takes hours when adding 55K ipsets BZ2046343...

2.3AI score
SaveExploits0
OSV
OSV
added 2022/03/15 9:12 a.m.13 views

ALBA-2022:0901 firewalld bug fix and enhancement update

firewalld is a firewall service daemon that provides a dynamic customizable firewall with a D-Bus interface. Bug Fixes and Enhancements: firewall-cmd takes hours when adding 55K ipsets BZ2046343...

7.2AI score
SaveExploits0
OpenVAS
OpenVAS
added 2022/01/28 12:0 a.m.18 views

Mageia: Security Advisory (MGASA-2020-0402)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS6.9AI score0.04594EPSS
SaveExploits4References4
Snyk
Snyk
added 2022/01/27 3:9 p.m.2 views

Exposed Dangerous Method or Function

Overview guake is a Guake Terminal Affected versions of this package are vulnerable to Exposed Dangerous Method or Function due to the exposure of executecommand and executecommandbyuuid methods via the d-bus interface, which makes it possible for a malicious user to run an arbitrary command via...

8CVSS6.8AI score0.0113EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2021/06/09 12:0 a.m.7 views

PT-2024-11282 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: A possible use-after-free issue has been identified in the Linux kernel, specifically in the mhi pci remove function of the bus: mhi: pci generic driver. The driver's remove path calls...

7.8CVSS5.8AI score0.00219EPSS
SaveExploits0References11
Tenable Nessus
Tenable Nessus
added 2021/04/30 12:0 a.m.37 views

EulerOS 2.0 SP3 : gdm (EulerOS-SA-2021-1787)

According to the versions of the gdm package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - A vulnerability was discovered in gdm before 3.31.4. When timed login is enabled in configuration, an attacker could bypass the lock screen by...

7.8CVSS6.5AI score0.00532EPSS
SaveExploits1References3
RedHat Linux
RedHat Linux
added 2020/12/22 9:43 a.m.5 views

kernel: out of bounds write in function i2c_smbus_xfer_emulated in drivers/i2c/i2c-core-smbus.c

An out of bounds OOB memory access flaw was found in i2csmbusxferemulated in drivers/i2c/i2c-core-smbus.c in I2C subsystem. A read request for length data-block0 greater than 'I2CSMBUSBLOCKMAX + 1' may cause underlying I2C driver write out of array's boundary. This could allow a local attacker wi...

6.7CVSS7.1AI score0.00417EPSS
SaveExploits0References4
OSV
OSV
added 2020/11/26 5:24 a.m.4 views

OPENSUSE-SU-2020:2024-1 Security update for blueman

This update for blueman fixes the following issues: - Update to version 2.1.4 CVE-2020-15238: Fixed a local denial-of-service in the D-Bus interface boo1178196 This update was imported from the openSUSE:Leap:15.2:Update update project...

7.1CVSS6.8AI score0.04594EPSS
SaveExploits4References3
Tenable Nessus
Tenable Nessus
added 2020/11/23 12:0 a.m.25 views

openSUSE Security Update : blueman (openSUSE-2020-1997)

This update for blueman fixes the following issues : - Update to version 2.1.4 - CVE-2020-15238: Fixed a local denial-of-service in the D-Bus interface boo1178196 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update...

7.1CVSS6.8AI score0.04594EPSS
SaveExploits4References2
OPENSUSE Linux
OPENSUSE Linux
added 2020/11/22 12:0 a.m.28 views

Security update for blueman (moderate)

openSUSE Security Update: Security update for blueman Announcement ID: openSUSE-SU-2020:1997-1 Rating: moderate References: 1178196 Cross-References: CVE-2020-15238 Affected Products: openSUSE Leap 15.2 openSUSE Backports SLE-15-SP2 An update that fixes one vulnerability is now available...

7.1CVSS6.8AI score0.04594EPSS
SaveExploits4References1
OSV
OSV
added 2020/11/08 2:14 p.m.9 views

MGASA-2020-0402 Updated blueman packages fixes a security vulnerability

Vaisha Bernard discovered that blueman did not properly sanitize input on the D-Bus interface to blueman-mechanism. A local attacker could possibly use this issue to escalate privileges and run arbitrary code or cause a denial of service CVE-2020-15238...

7.1CVSS7.2AI score0.04594EPSS
SaveExploits4References3
Debian
Debian
added 2020/11/03 9:47 a.m.84 views

[SECURITY] [DLA 2430-1] blueman security update

----------------------------------------------------------------------- Debian LTS Advisory DLA-2430-1 [email protected] https://www.debian.org/lts/security/ Utkarsh Gupta November 03, 2020 https://wiki.debian.org/LTS -...

7.1CVSS6.9AI score0.04594EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2020/10/28 12:0 a.m.372 views

PackageKit File Existence Disclosure

Exploit Title: File Existence Disclosure in PackageKit " sys.exit0 FILETOCHECK = sys.argv1 bus = dbus.SystemBus aptdbusobject = bus.getobject"org.freedesktop.PackageKit", "/org/freedesktop/PackageKit" aptdbusinterface = dbus.Interfaceaptdbusobject, "org.freedeskt...

7.4AI score
SaveExploits0
Rows per page
Query Builder