2887 matches found
CVE-2018-1974
IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...
CVE-2018-1974
IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...
CVE-2018-1974
CVE-2018-1974 affects IBM MQ (WebSphere MQ) 8.x and 9.x. The issue allows an authenticated attacker to escalate privileges when using multiplexed channels, due to how channels are multiplexed. Affected products/versions include IBM MQ v8 (8.0.0.0–8.0.0.10), MQ v9 LTS (9.0.0.0–9.0.0.5), MQ v9.1 CD...
CVE-2018-1974: Undefined Security Weakness
IBM WebSphere 8.0.0.0 through 9.1.1 could allow an authenticated attacker to escalate their privileges when using multiplexed channels. IBM X-Force ID: 153915...
Security Bulletin: IBM MQ is vulnerable to a privilege escalation attack when using multiplexed channels (CVE-2018-1974)
Summary IBM MQ could allow an authenticated attacker to escalate their privileges with channels that have multiplexing enabled. Vulnerability Details CVEID: CVE-2018-1974 DESCRIPTION: IBM MQ could allow an authenticated attacker to escalate their privileges when using multiplexed channels. CVSS...
PT-2019-2904
Name of the Vulnerable Software and Affected Versions SoX versions 14.4.2 Description The issue is related to an integer overflow in the channels start function of the SoX audio editor, which can lead to a heap-based buffer overflow. This can be exploited by a remote attacker to cause a denial of...
CVE-2018-18354
creationtimestamp| type| source ---|---|--- 2019-02-07 12:43:39+00:00| published-proof-of-concept| https://t.me/antichat/3530 2019-02-07 17:30:06+00:00| published-proof-of-concept| https://t.me/news4hack/251 2019-03-12 01:23:41+00:00| published-proof-of-concept| https://t.me/R0Crew/943...
CVE-2018-18311
creationtimestamp| type| source ---|---|--- 2019-02-07 08:30:33+00:00| published-proof-of-concept| https://t.me/novitollch/13 2019-02-08 06:11:34+00:00| published-proof-of-concept| https://t.me/novitollch/12 2019-02-21 01:55:08+00:00| published-proof-of-concept| https://t.me/novitollch/19...
DEBIAN-CVE-2018-18505
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
CVE-2018-18505: Improper Authentication
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
Mozilla: Privilege escalation through IPC channel messages
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
Mozilla: Privilege escalation through IPC channel messages
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
UBUNTU-CVE-2018-18505
An earlier fix for an Inter-process Communication IPC vulnerability, CVE-2011-3079, added authentication to communication between IPC endpoints and server parents during IPC process creation. This authentication is insufficient for channels created after the IPC process is started, leading to the...
Hacking the GCHQ Backdoor
Last week, I evaluated the security of a recent GCHQ backdoor proposal for communications systems. Furthering the debate, Nate Cardozo and Seth Schoen of EFF explain how this sort of backdoor can be detected: In fact, we think when the ghost feature is active -- silently inserting a secret...
Information Disclosure
rhc-chk.rb in Red Hat OpenShift Origin is vulnerable to information disclosure. When -d debug mode is used, the output of the process contains confidential information such as the plaintext database passwords. This leads to unintentional disclosure of confidential in support channels such as a...
Design/Logic Flaw
DISPUTED main.aspx in Microstrategy Analytics 10.4.0026.0049 and earlier has CSRF. NOTE: The vendor claims that documentation for preventing a CSRF attack has been provided https://community.microstrategy.com/s/article/KB37643-New-security-feature-introduced-in-MicroStrategy-Web-9-0?language=enUS...
CVE-2018-1000852: Out-of-bounds Read
FreeRDP FreeRDP 2.0.0-rc3 released version before commit 205c612820dac644d665b5bb1cdf437dc5ca01e3 contains a Other/Unknown vulnerability in channels/drdynvc/client/drdynvcmain.c, drdynvcprocesscapabilityrequest that can result in The RDP server can read the client's memory.. This attack appear to...
PT-2023-15450 · Unknown +1 · Gpac Mp4Box +1
Name of the Vulnerable Software and Affected Versions: GPAC MP4box version 2.1-DEV-rev593-g007bf61a0 Description: The issue is related to a Buffer Overflow in the eac3 update channels function, located in the media tools/av parsers.c file at line 9113. This function is part of the GPAC MP4box...