13603 matches found
Denial Of Service (DoS)
jbossws-common is vulnerable to denial of service DoS. The vulnerability exists as it was found that JBoss Web Services Native did not properly protect against recursive entity resolution when processing Document Type Definitions DTD. A remote attacker could exploit this flaw by sending a...
Arbitrary Code Execution
helixplayer is vulnerable to arbitrary code execution. Multiple security flaws were discovered in RealPlayer. Helix Player and RealPlayer share a common source code base; therefore, some of the flaws discovered in RealPlayer may also affect Helix Player. Some of these flaws could, when opening,...
Denial Of Service (DoS)
The Common UNIX Printing System CUPS is vulnerable to Denial of Service DoS. A use-after-free flaw was found in the way CUPS handled references in its file descriptors-handling interface. A remote attacker could, in a specially-crafted way, query for the list of current print jobs for a specific...
Denial Of Service (DoS)
The Common UNIX Printing System CUPS is vulnerable to Denial Of Service DoS. A bug was found in the way CUPS handled SSL negotiation. A remote user capable of connecting to the CUPS daemon could cause a denial of service to other CUPS users...
Secdo: Privilege escalation via hardcoded script path
Secdo tries to execute a script at a hardcoded path if present, which allows a local authenticated user with 'create folders or append data' access to the root of the OS disk C:\ to gain system privileges if the path does not already exist or is writable. This issue affects all versions of Secdo...
CVE-2016-11029
creationtimestamp| type| source ---|---|--- 2020-04-07 19:18:28+00:00| seen| https://t.me/cibsecurity/11079...
virt:rhel security and bug fix update
An update is available for libiscsi, netcf, sgabios. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Kernel-based Virtual Machine KVM offers a full virtualizatio...
Grav Input Validation Error Vulnerability
Grav is an extensible CMS Content Management System for personal blogs, small content publishing platforms and one-page product presentations. An input validation error vulnerability exists in the Common/Grav.php file in Grav versions prior to 1.6.23. The vulnerability stems from a web-based syst...
OSSEM - Open Source Security Events Metadata
The Open Source Security Events Metadata OSSEM is a community-led project that focuses primarily on the documentation and standardization of security event logs from diverse data sources and operating systems. Security events are documented in a dictionary format and can be used as a reference fo...
Open Redirect
getgrav/grav is vulnerable to open redirect. The vulnerability exists because the function redirect in Common/Grav.php does not validate the internal route parameter route and redirect to another location, allowing attackers to provide a malicious route to a location or file...
The vulnerability of the pg_ctlcluster script in the postgresql-common package involves insecure privilege management. This allows attackers to access confidential data, compromise its integrity, and cause service failures.
The vulnerability of the pgctlcluster script in the postgresql-common package is related to an access rights rollback error during the creation of temporary directories for sockets/stats. Exploiting this vulnerability allows an attacker to gain access to confidential data, compromise its integrit...
CVE-2020-11529
Common/Grav.php in Grav before 1.7 has an Open Redirect. This is partially fixed in 1.6.23 and still present in 1.6.x...
CVE-2020-11529
Grav before 1.7 has an open redirect in Common/Grav.php. The issue is partially fixed in 1.6.23 but remains in 1.6.x; Grav 1.7+ is affected by the resolved behavior. Nuclei and Veracode entries describe the risk as open redirect that can redirect users to a malicious site (phishing). Practical im...
CVE-2019-19346
creationtimestamp| type| source ---|---|--- 2020-04-03 00:58:28+00:00| seen| https://t.me/cibsecurity/10959...
CVE-2019-3945
Web server running on Parrot ANAFI can be crashed due to the SDK command "CommonCurrentDateTime" being sent to control service with larger than expected date length...
Access Restriction Bypass
The Common UNIX Printing System CUPS is vulnerable to local privilege escalation to root due to insecure environment variable handling...
CVE-2020-10531
An issue was discovered in International Components for Unicode ICU for C/C++ through 66.1. An integer overflow, leading to a heap-based buffer overflow, exists in the UnicodeString::doAppend function in common/unistr.cpp...
CVE-2015-7334
creationtimestamp| type| source ---|---|--- 2020-03-27 17:52:15+00:00| seen| https://t.me/cibsecurity/10791...
postgresql: Selectivity estimators bypass row security policies
PostgreSQL maintains column statistics for tables. Certain statistics, such as histograms and lists of most common values, contain values taken from the column. PostgreSQL does not evaluate row security policies before consulting those statistics during query planning; an attacker can exploit thi...