CVE-2019-5804

Incorrect command line processing in Chrome in Google Chrome prior to 73.0.3683.75 allowed a local attacker to perform domain spoofing via a crafted domain name...

[SECURITY] Fedora 29 Update: xen-4.11.1-4.fc29

This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor...

PT-2019-6149

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 73.0.3683.75 Description The issue is related to incorrect command line processing, allowing an attacker to perform domain spoofing via a crafted domain name. This can be exploited by injecting or modifying...

Input validation

A vulnerability in the CLI of Cisco NX-OS Software could allow an authenticated, local attacker to execute arbitrary commands on the underlying operating system of an affected device. The vulnerability is due to insufficient validation of arguments passed to certain CLI commands. An attacker coul...

cURL: Multiple vulnerabilities

Background A command line tool and library for transferring data with URLs. Description Multiple vulnerabilities have been discovered in cURL. Please review the CVE identifiers referenced below for details. Impact Remote attackers could cause a Denial of Service condition. Workaround There is no...

[SECURITY] Fedora 28 Update: koji-1.16.2-1.fc28

Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...

ClearOS 7 Community Edition Cross Site Scripting

Exploit Title: ClearOS 7 Community Edition | Cross-Site Scripting Date: 06.03.2019 Exploit Author: Ozer Goker Vendor Homepage: https://www.clearos.com Software Link: http://mirror.clearos.com/clearos/7/iso/x8664/ClearOS-DVD-x8664.iso Version: 7 Introduction ClearOS is a small business server...

PT-2019-1565

Name of the Vulnerable Software and Affected Versions Cisco NX-OS Software versions prior to 7.03I74 Cisco NX-OS Software versions prior to 7.03F35 Description The issue is caused by insufficient authorization enforcement in the command-line interface of Cisco NX-OS devices, allowing an...

CVE-2018-19636

Supportutils, before version 3.1-5.7.1, when run with command line argument -A searched the file system for a ndspath binary. If an attacker provides one at an arbitrary location it is executed with root privileges...

tcpdump 4.9.3 - Multiple Heap-Based Out-of-Bounds Reads

tcpdump 4.9.3 - Multiple Heap-Based Out-of-Bounds Reads Through fuzzing of network capture .pcap files, we have identified 16 crashes with unique stack traces in tcpdump. These crashes are caused by heap-based out-of-bounds memory reads, and can be reproduced with the latest tcpdump source code...

tcpdump < 4.9.3 - Multiple Heap-Based Out-of-Bounds Reads

Through fuzzing of network capture .pcap files, we have identified 16 crashes with unique stack traces in tcpdump. These crashes are caused by heap-based out-of-bounds memory reads, and can be reproduced with the latest tcpdump source code from GitHub, compiled with AddressSanitizer: --- cut --- ...

[SECURITY] Fedora 29 Update: koji-1.16.2-1.fc29

Koji is a system for building and tracking RPMS. The base package contains shared libraries and the command-line interface...

Security Bulletin: A vulnerability in IBM WebSphere Application Server affects IBM Spectrum Scale (CVE-2018-1901)

Summary There is a vulnerability in IBM WebSphere Application Server, used by IBM Spectrum Scale. This issue allow a remote attacker to temporarily gain elevated privileges on the system. Vulnerability Details IBM WebSphere Application Server is used to provide graphical user interface for managi...

Intel PROSet Wireless Buffer Overflow Vulnerability

Intel PROSet Wireless is a driver for the Intel PROSet wireless card from Intel USA. A buffer overflow vulnerability exists in the command line interface in IntelR PROSet Wireless version 20.50 and earlier. A local attacker could exploit this vulnerability to cause a denial of service...

Buffer overflow

Buffer overflow in the command-line interface for IntelR PROSet Wireless v20.50 and before may allow an authenticated user to potentially enable denial of service via local access...

CVE-2018-12159

Buffer overflow in the command-line interface for IntelR PROSet Wireless v20.50 and before may allow an authenticated user to potentially enable denial of service via local access...

CVE-2018-12159

CVE-2018-12159 affects Intel® PROSet Wireless Driver v20.50 and earlier. The issue is a buffer overflow in the command-line interface that may allow an authenticated local attacker to cause a denial of service. Intel’s advisory confirms vulnerable products are the affected driver versions and rec...

systemd: stack overflow when calling syslog from a command with long cmdline

An allocation of memory without limits, that could result in the stack clashing with another memory region, was discovered in systemd-journald when a program with long command line arguments calls syslog. A local attacker may use this flaw to crash systemd-journald or escalate privileges...

CVE-2018-12159: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the command-line interface for IntelR PROSet Wireless v20.50 and before may allow an authenticated user to potentially enable denial of service via local access...

PT-2019-8871

Name of the Vulnerable Software and Affected Versions IntelR PROSet Wireless versions prior to v20.50 Description A buffer overflow issue in the command-line interface may allow an authenticated user to potentially enable denial of service via local access. Recommendations For versions prior to...