Lucene search
+L

2782 matches found

CNVD
CNVD
•added 2019/04/16 12:00 a.m.•5 views

SQL injection vulnerability in ne***.php file of DM website builder system

DM building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM website builder system ne.php file SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive information...

7.7AI score
SaveExploits0
CNVD
CNVD
•added 2019/03/29 12:00 a.m.•9 views

SQL Injection Vulnerability in DM Website System

DM building system is developed by php + mysql a set of specialized for small and medium-sized enterprise website construction of open source cms. DM building system has a file inclusion vulnerability , attackers can use the vulnerability to obtain database information...

6.7AI score
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2019/03/12 12:00 a.m.•24 views

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux allows a hacker to cause a service failure.

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux is related to an error that causes a failure when executing the “fly-dmctl rtcwake” command without specifying the arguments “-t/-s secs”. Exploiting this vulnerability could allow a perpetrator ...

5.5CVSS5.5AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/03/12 12:00 a.m.•23 views

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system allows a intruder to unauthorizedly alter the level of session integrity.

The vulnerability of the graphical user input component in the fly-dm system of the Astra Linux operating system is related to an error that causes the fly-mac-dialog component to be executed without the required DBUSSESSIONBUSADDRESS=nothing option. This option is necessary for executing the dbu...

8.8CVSS5.4AI score
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2019/03/12 12:00 a.m.•14 views

The vulnerability of the graphical user input component in the fly-dm operating system of Astra Linux allows a hacker to execute arbitrary code.

The vulnerability of the graphical user interface component in the fly-dm system of the Astra Linux operating system is related to an error that allows control over the systemd daemon by generating commands like “fly-dmctl suspendtohyibernate-p”, which execute the command “systemctl -p...

8.8CVSS6AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2019/03/03 12:00 a.m.•96 views

Debian: Security Advisory (DLA-1696-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.5CVSS6.4AI score0.02136EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2019/02/28 12:00 a.m.•4 views

PT-2019-16002

Name of the Vulnerable Software and Affected Versions Android versions 7.0 through 9 Description The issue is related to a buffer overflow in the btif dm data copy function of btif core.cc, which could lead to a possible out of bounds write. This might result in remote code execution without...

9.3CVSS0.02027EPSS
SaveExploits0References4
Oracle linux
Oracle linux
•added 2019/02/19 12:00 a.m.•104 views

systemd security update

219-62.0.4 - do not create utmp update symlinks for reboot and poweroff Orabug: 27854896 - OL7 udev rule for virtio net standby interface Orabug: 28826743 - fix netdev is missing for iscsi entry in /etc/fstab Orabug: 25897792 [email protected] - set 'RemoveIPC=no' in logind.conf as default fo...

5.5CVSS6.6AI score0.02035EPSS
SaveExploits1
BDU FSTEC
BDU FSTEC
•added 2019/02/07 12:00 a.m.•14 views

The vulnerability of the fly-admin-dm graphical input configuration tool in the Astra Linux operating system allows a perpetrator to compromise the integrity and accessibility of protected data.

The vulnerability of the fly-admin-dm graphical input configuration tool in the Astra Linux operating system lies in the deletion of the original file when the copying of it to another partition is canceled. Exploiting this vulnerability allows a remote attacker to compromise the integrity and...

7.5CVSS5.6AI score
SaveExploits0
Oracle linux
Oracle linux
•added 2019/01/30 12:00 a.m.•161 views

systemd security update

219-62.0.4 - do not create utmp update symlinks for reboot and poweroff Orabug: 27854896 - OL7 udev rule for virtio net standby interface Orabug: 28826743 - fix netdev is missing for iscsi entry in /etc/fstab Orabug: 25897792 [email protected] - set 'RemoveIPC=no' in logind.conf as default fo...

3.3CVSS1.1AI score0.004EPSS
SaveExploits0
CNVD
CNVD
•added 2019/01/18 12:00 a.m.•67 views

Red Hat Ceph Unauthorized Access Vulnerability

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system based on POSIX Portable Operating System Interface without a single point of failure, so that data can be fault-tolerant and seamless replication...

5.7CVSS6.7AI score0.0049EPSS
SaveExploits0References1
OSV
OSV
•added 2019/01/15 9:29 p.m.•30 views

CVE-2018-14662

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption...

5.7CVSS6.3AI score
SaveExploits0References8
Mend
Mend
•added 2019/01/15 9:00 p.m.•2 views

CVE-2018-14662

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption...

5.7CVSS0.0049EPSS
SaveExploits0References10
OSV
OSV
•added 2019/01/15 12:00 a.m.•15 views

UBUNTU-CVE-2018-14662

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption...

5.7CVSS6.5AI score0.0049EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/01/15 12:00 a.m.•6 views

CVE-2018-14662: Improper Authorization

It was found Ceph versions before 13.2.4 that authenticated ceph users with read only permissions could steal dm-crypt encryption keys used in ceph disk encryption...

5.7CVSS7AI score0.0049EPSS
SaveExploits0References3
Oracle linux
Oracle linux
•added 2019/01/14 12:00 a.m.•166 views

systemd security update

219-62.0.4 - do not create utmp update symlinks for reboot and poweroff Orabug: 27854896 - OL7 udev rule for virtio net standby interface Orabug: 28826743 - fix netdev is missing for iscsi entry in /etc/fstab Orabug: 25897792 [email protected] - set 'RemoveIPC=no' in logind.conf as default fo...

8.8CVSS7AI score0.03016EPSS
SaveExploits3
CNVD
CNVD
•added 2019/01/02 12:00 a.m.•12 views

ASUS ZenFone 3 Max has an unspecified vulnerability

ASUS ZenFone 3 Max is an Android-based smartphone from ASUS. Pre-installation in ASUS ZenFone 3 Max Build fingerprint used is asus/USPhone/ASUSX0081:7.0/NRD90M/USPhone-14.14.1711.92-20171208:user/release-keys A security vulnerability exists in the com.asus.dm.installer.DMInstallerService service ...

5.5CVSS7AI score0.00365EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2018/12/29 12:00 a.m.•2 views

PT-2018-19316

Уязвимость компоненты графического входа пользователя в систему fly-dm операционной системы Astra Linux связана с ошибкой, приводящей к возможности управления программным пакетом systemd путем формирования команд вида "fly-dmctl suspendtohyibernate произвольная команда -p", запускающих на...

6.8CVSS5.8AI score
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2018/12/29 12:00 a.m.•5 views

PT-2018-2331

Name of the Vulnerable Software and Affected Versions Astra Linux affected versions not specified Description The issue is related to the fly-admin-dm utility in Astra Linux, where the original file is deleted when its copying to another partition is cancelled. This could allow a remote attacker ...

7.5CVSS6AI score
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2018/12/29 12:00 a.m.•3 views

PT-2018-19315

Уязвимость компоненты графического входа пользователя в систему fly-dm операционной системы Astra Linux связана с ошибкой, приводящей к сбою при выполнении команды "fly-dmctl rtcwake" без указания аргументов "-t/-s secs". Эксплуатация уязвимости может позволить нарушителю вызвать отказ в...

4.6CVSS5.8AI score
SaveExploits0References2
Rows per page
Query Builder