[SECURITY] Fedora 33 Update: zypper-1.14.42-1.fc33

Zypper is a command line package manager tool using libzypp, which can be used to manage software for RPM based systems...

CVE-2021-27171

An issue was discovered on FiberHome HG6245D devices through RP2613. It is possible to start a Linux telnetd as root on port 26/tcp by using the CLI interface commands of ddd and shell or tshell...

GNU Screen Denial of Service Vulnerability (CNVD-2021-13240)

GNU Screen is a freeware program developed by the GNU Project for switching between command-line terminals. It allows users to connect to multiple local or remote command line sessions at the same time and switch between them freely. A denial of service vulnerability exists in encoding.c in GNU...

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to compromise the confidentiality and integrity of the protected information...

Fedora: Security Advisory for pngcheck (FEDORA-2021-e24167b0e8)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2021-2173 · Microsoft · Azure Iot Cli Extension

Name of the Vulnerable Software and Affected Versions: Azure IoT CLI extension affected versions not specified Description: The issue is related to errors in privilege management in the Azure IoT CLI interface. Exploitation of this issue may allow an attacker to elevate their privileges...

CVE-2020-7782 Command Injection

This affects all versions of package spritesheet-js. It depends on a vulnerable package platform-command. The injection point is located in line 32 in lib/generator.js, which is triggered by main entry of the package...

spritesheet.js Injection Vulnerability

spritesheet.js is a command line Spritesheet aka Texture Atlas generator written in node.js by the Polish individual developer Krzysztof-o spritesheet.js. Provides Spritesheet aka Texture Atlas command line generation. An injection vulnerability exists in spritsheet. The vulnerability stems from...

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to gain unauthorized access to protected information.

The vulnerability of the command-line interface CLI of Cisco SD-WAN software-defined networks is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Fedora: Security Advisory for python-pygments (FEDORA-2021-175e686ca6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the command-line interface of the programmatically defined Cisco SD-WAN network allows a intruder to gain unauthorized access to protected information.

The vulnerability of the command-line interface of Cisco SD-WAN programs exists due to insufficient validation of input data in iperf. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

[SECURITY] Fedora 32 Update: python-pygments-2.4.2-8.fc32

Pygments is a generic syntax highlighter for general use in all kinds of software such as forum systems, wikis or other applications that need to prettify source code. Highlights are: a wide range of common languages and markup formats is supported special attention is paid to details that increa...

[SECURITY] Fedora 33 Update: python-pygments-2.6.1-5.fc33

Pygments is a generic syntax highlighter for general use in all kinds of software such as forum systems, wikis or other applications that need to prettify source code. Highlights are: a wide range of common languages and markup formats is supported special attention is paid to details that increa...

Cisco Patches Recently Disclosed "sudo" Vulnerability (CVE-2021-3156) in Multiple Products

While Punxsutawney Phil may have said we only have six more weeks of winter, the need to patch software and hardware weaknesses will, unfortunately, never end. Cisco has released security updates to address vulnerabilities in most of their product portfolio, some of which may be exploited to gain...

CVE-2021-1370

A vulnerability in a CLI command of Cisco IOS XR Software for the Cisco 8000 Series Routers and Network Convergence System 540 Series Routers running NCS540L software images could allow an authenticated, local attacker to elevate their privilege to root. To exploit this vulnerability, an attacker...

Hotfix XS82E016 - For Citrix Hypervisor 8.2

Who Should Install This Hotfix? This is a hotfix for customers running Citrix Hypervisor 8.2. All customers who are affected by the issues described inCTX291439 - Citrix Hypervisor Multiple Security Updatesshould install this hotfix. Information About this Hotfix Component| Details ---|---...

The vulnerability of the chrome-launcher software arises from the lack of measures taken to neutralize special elements, allowing a perpetrator to execute arbitrary commands.

The vulnerability of the chrome-launcher software exists due to the lack of measures taken to neutralize special elements used in the operating system’s command line. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Solaris 10 (Intel) - 'dtprintinfo' Local Privilege Escalation (2)

Exploit Title: Solaris 10 1/13 Intel - 'dtprintinfo' Local Privilege Escalation 2 Date: 2021-02-01 Exploit Author: Marco Ivaldi Vendor Homepage: https://www.oracle.com/solaris/solaris10/ Version: Solaris 10 Tested on: Solaris 10 1/13 Intel / raptordtprintcheckdirintel.c - Solaris/Intel 0day? LPE...

Exploit for Off-by-one Error in Sudo_Project Sudo

CVE-2021-3156 Description Sudo before 1.9.5p2 has a Heap-based...

CentOS 8 : virt-manager (CESA-2019:3464)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2019:3464 advisory. - virt-install: unattended option leaks password via command line argument CVE-2019-10183 Note that Nessus has not tested for this issue but has instead relied...