13948 matches found
CVE-2018-20033
A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and th...
Remote code execution
A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and th...
CVE-2018-20033
A Remote Code Execution vulnerability in lmgrd and vendor daemon components of FlexNet Publisher version 11.16.1.0 and earlier could allow a remote attacker to corrupt the memory by allocating / deallocating memory, loading lmgrd or the vendor daemon and causing the heartbeat between lmgrd and th...
Monero: Zero-amount miner TX + RingCT allows monero wallet to receive arbitrary amount of monero
NOTE! Thanks for submitting a report! Please replace all the square sections below with the pertinent details. Remember, the more detail you provide, the easier it is for us to verify and then potentially issue a bounty, so be sure to take your time filling out the report! Summary: By mining a...
CVE-2018-20033
FlexNet Publisher (lmgrd and vendor daemon) versions 11.16.1.0 and earlier are vulnerable to a memory corruption path that can cause the heartbeat to fail and the vendor daemon to shut down, with remote code execution possible. Public advisories (NVD, ICSA-19-192-05/07, CNVD) confirm CVE-2018-200...
[SECURITY] Fedora 29 Update: systemd-239-12.git8bca462.fc29
systemd is a system and service manager that runs as PID 1 and starts the rest of the system. It provides aggressive parallelization capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, keeps track of processes using Linux control groups,...
The vulnerability of Avahi-daemon, a service for discovering services in a local network, allows attackers to expose sensitive information or cause service failures.
The vulnerability of Avahi-daemon, a service for discovering services in a local network, is related to lack of access control. Exploiting this vulnerability can allow an attacker, operating remotely, to disclose sensitive information or cause service failures...
Quagga BGP Daemon bgp_update_receive Double Free (CVE-2018-5379)
A double free vulnerability has been reported in Quagga BGP Daemon. The vulnerability is due to improper handling of cluster list and unknown attributes. A remote attacker can exploit this vulnerability by sending a crafted BGP UPDATE message to the target server...
Quagga BGP Daemon bgp_capability_msg_parse Denial-of-Service (CVE-2018-5381)
A denial-of-service vulnerability has been reported in the BGP Daemon of Quagga. The vulnerability is due to improper handling of Multiprotocol Extensions Capabilities within certain BGP messages. A remote attacker could exploit this vulnerability by sending a crafted BGP message to the target...
Docker < 18.09.0 DoS Vulnerability
Docker is prone to a denial of service DoS vulnerability. Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you...
CVE-2018-20781
In pam/gkr-pam-module.c in GNOME Keyring before 3.27.2, the user's password is kept in a session-child process spawned from the LightDM daemon. This can expose the credential in cleartext...
Memory corruption
There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650,...
CVE-2018-13888
There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650,...
CVE-2018-13888
There is potential for memory corruption in the RIL daemon due to de reference of memory outside the allocated array length in RIL in Snapdragon Auto, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables in versions MDM9206, MDM9607, MDM9635M, MDM9650,...
CVE-2018-13888
CVE-2018-13888 describes memory corruption in the RIL daemon due to deference of memory outside the allocated array in Snapdragon platform families (e.g., Snapdragon Auto, Mobile, Wearables). Affected components are the RIL daemon implementations across listed Snapdragon SoCs and SKUs. The CVE en...
Juniper Junos MX Malformed Packet - DOS (JSA10900)
Receipt of a malformed packet on MX Series devices with dynamic vlan configuration can trigger an uncontrolled recursion loop in the Broadband Edge subscriber management daemon bbe-smgd, and lead to high CPU usage and a crash of the bbe-smgd service. Repeated receipt of the same packet can result...
PT-2019-6320 · Usbguard +8 · Usbguard +8
Name of the Vulnerable Software and Affected Versions: USBGuard versions prior to 1.1.0 Description: The issue is related to an access error in the usbguard-dbus daemon of the USBGuard software, which allows an unprivileged user to connect USB devices. This could enable an attacker to access...
The vulnerability of the ALD service in the Astra Linux operating system allows a hacker to trigger a service failure.
The vulnerability of the ALD service in the Astra Linux operating system is related to an error that causes excessive network traffic generation. Exploiting this vulnerability allows a malicious actor to cause a failure in the slapd service or the entire system...
Compensating Controls: When Patching Isn’t an Option
Your software vendor is asleep at the wheel and your devs still need that legacy daemon...
The vulnerability of the Remote Administration Daemon (RAD) component of the Solaris operating system allows a perpetrator to gain unauthorized access to protected data.
The vulnerability of the Remote Administration Daemon RAD component in the Solaris operating system is related to deficiencies in access control. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected data from a remote location...