8265 matches found
ntp: Stack-based buffer overflow in ntpq and ntpdc allows denial of service or code execution
The ntpq and ntpdc command-line utilities that are part of ntp package are vulnerable to stack-based buffer overflow via crafted hostname. Applications using these vulnerable utilities with an untrusted input may be potentially exploited, resulting in a crash or arbitrary code execution under...
Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform
Description of the security update for the Microsoft Visual Studio 2005 Service Pack 1 development platform INTRODUCTION Microsoft has released security bulletin MS07-052. The security bulletin contains all the relevant information about the security update. This information includes file manifes...
Description of the security update for Microsoft Visual Studio 2008: July 28, 2009
Description of the security update for Microsoft Visual Studio 2008: July 28, 2009 INTRODUCTION Microsoft has released security bulletin MS09-035. To view the complete security bulletin, visit one of the following Microsoft Web sites: Home...
CVE-2020-6765
D-Link DSL-GS225 J1 AU1.0.4 devices allow an admin to execute OS commands by placing shell metacharacters after a supported CLI command, as demonstrated by ping -c1 127.0.0.1; cat/etc/passwd. The CLI is reachable by TELNET...
Privilege Escalation
qemu-kvm is vulnerable to privilege escalation. It was found that qemu-kvm did not properly drop supplemental group privileges when the root user started guests from the command line "/usr/libexec/qemu-kvm" with the "-runas" option. A qemu-kvm process started this way could use this flaw to gain...
Information Disclosure
encryptfs-utils is vulnerable to information disclosure. A disclosure flaw was found in the way the "ecryptfs-setup-private" script passed passphrases to the "ecryptfs-wrap-passphrase" and "ecryptfs-add-passphrase" commands as command line arguments. A local user could obtain the passphrases of...
Information Disclosure
firefox is vulnerable to information disclosure. The vulnerability exists as a flaw was found in the way Firefox handled certain command line URLs. If another application passed Firefox a malformed URL, it could result in Firefox executing local malicious content with chrome privileges...
CentOS 7 : libosinfo (RHSA-2020:1051)
The remote CentOS Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:1051 advisory. - libosinfo 1.5.0 allows local users to discover credentials by listing a process, because credentials are passed to osinfo-install-script via the command line...
Improvements for the System Update Readiness Tool in Windows 7 and Windows Server 2008 R2
Improvements for the System Update Readiness Tool in Windows 7 and Windows Server 2008 R2 About the System Update Readiness Tool The System Update Readiness Tool can help fix problems that might prevent Windows updates and service packs from installing. For more information and how to download th...
CVE-2018-1002101
In Kubernetes versions 1.9.0-1.9.9, 1.10.0-1.10.5, and 1.11.0-1.11.1, user input was handled insecurely while setting up volume mounts on Windows nodes, which could lead to command line argument injection...
The vulnerability of the command-line interface of the Cisco FXOS operating system allows a attacker to gain access to read, modify, add, or delete data.
The vulnerability of the command-line interface of the Cisco FXOS operating system is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker to gain read, modify, add, or delete access to data...
The vulnerability of the command-line interface of the Cisco FXOS operating system, allowing a hacker to execute arbitrary commands
The vulnerability of the Cisco FXOS operating system’s command-line interface relates to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands with root privileges...
The vulnerability of the command-line interface of the Cisco Unified Computing System (UCS) Manager and the Cisco FXOS operating system allows a hacker to execute arbitrary code.
The vulnerability of the command-line interface of the Cisco Unified Computing System UCS Manager and the Cisco FXOS operating system is related to the lack of measures taken to neutralize special elements used in operating system commands. Exploiting this vulnerability can allow an attacker to...
The vulnerability of the command-line interface of the Cisco Unified Computing System (UCS) Manager and the Cisco FXOS operating system allows a hacker to execute arbitrary code.
The vulnerability of the command-line interface of the Cisco Unified Computing System UCS Manager and the Cisco FXOS operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...
[SECURITY] Fedora 30 Update: telnet-0.17-77.fc30
Telnet is a popular protocol for logging into remote systems over the Internet. The package provides a command line Telnet client...
Fedora: Security Advisory for telnet (FEDORA-2020-11ea78ff8e)
The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
ledger: Multiple vulnerabilities
Background Ledger is a powerful, double-entry accounting system that is accessed from the UNIX command-line. Description Multiple vulnerabilities have been discovered in ledger. Please review the CVE identifiers referenced below for details. Impact A remote attacker could entice a user to process...
Libosinfo: osinfo-install-script option leaks password via command line argument
A flaw was found in libosinfo, version 1.5.0, where the script for automated guest installations, 'osinfo-install-script', accepts user and admin passwords via command line arguments. This could allow guest passwords to leak to other system users via a process listing...
CVE-2020-6797
By downloading a file with the .fileloc extension, a semi-privileged extension could launch an arbitrary application on the user's computer. The attacker is restricted as they are unable to download non-quarantined files or supply command line arguments to the application, limiting the impact...