CVE-2009-5048

Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...

CVE-2009-5048

Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...

CVE-2009-5048

Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...

CVE-2009-5048

CVE-2009-5048 is a stored XSS in the Jetty project, specifically the Cookie Dump Servlet, affecting Jetty 6.1.x up to 6.1.20. The root cause is improper validation of user-supplied input in the Cookie Dump Servlet, enabling an attacker to inject script that could access cookie-based credentials. ...

PT-2019-6515

Name of the Vulnerable Software and Affected Versions jetty versions prior to 6.1.22 Description The issue is related to a Dump Servlet information leak in jetty. Recommendations For versions prior to 6.1.22, update to version 6.1.22 or later to resolve the issue...

CVE-2009-5046: Improper Neutralization of Input During Web Page Generation

JSP Dump and Session Dump Servlet XSS in jetty before 6.1.22...

CVE-2009-5048: Improper Neutralization of Input During Web Page Generation

Cookie Dump Servlet stored XSS vulnerability in jetty though 6.1.20...

PT-2019-6516

Name of the Vulnerable Software and Affected Versions jetty versions prior to 6.1.22 Description The issue concerns a JSP Dump and Session Dump Servlet XSS in jetty. Recommendations For versions prior to 6.1.22, update to version 6.1.22 or later to resolve the issue...

PT-2019-6518

Name of the Vulnerable Software and Affected Versions jetty versions prior to 6.1.21 Description The issue is related to a stored XSS vulnerability in the Cookie Dump Servlet. Recommendations For versions prior to 6.1.21, update to version 6.1.21 or later to resolve the issue...

CVE-2009-5045: Exposure of Sensitive Information to an Unauthorized Actor

Dump Servlet information leak in jetty before 6.1.22...

kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs. This allows local users to obtain sensitive information, cause a denial of service DoS, or possibly have unspecified other impa...

kernel: fix race condition between mmget_not_zero()/get_task_mm() and core dumping

A flaw was found in the Linux kernel where the coredump implementation does not use locking or other mechanisms to prevent vma layout or vma flags changes while it runs. This allows local users to obtain sensitive information, cause a denial of service DoS, or possibly have unspecified other impa...

Junos OS: SIP ALG flowd DoS (JSA10953)

According to its self-reported version number, the remote Juniper Junos device is affected by a vulnerability in the SIP ALG packet processing service which allows an attacker to cause a Denial of Service DoS to the device. A remote, unauthenticated attacker can exploit this by sending specific...

USN-4171-2 apport vulnerabilities

USN-4171-1 fixed several vulnerabilities in apport. This update provides the corresponding update for Ubuntu 14.04 ESM. Original advisory details: Kevin Backhouse discovered Apport would read its user-controlled settings file as the root user. This could be used by a local attacker to possibly...

CVE-2013-0165

cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin/dump.sh in OpenShift does not properly create files in /tmp...

PT-2019-6829 · Red Hat · Openshift

Name of the Vulnerable Software and Affected Versions: OpenShift affected versions not specified Description: The issue is related to the improper creation of files in /tmp by the dump.sh script in the cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin directory of OpenShift...

USN-4171-1: Apport vulnerabilities

Kevin Backhouse discovered Apport would read its user-controlled settings file as the root user. This could be used by a local attacker to possibly crash Apport or have other unspecified consequences. CVE-2019-11481 Sander Bos discovered a race-condition in Apport during core dump creation. This...

PT-2019-5265

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.3.11 Description The issue is related to the mlx5 fw fatal reporter dump function in the Linux kernel, which is associated with an uncontrolled resource consumption, also known as a resource exhaustion issue...

New IDA Pro plugin provides TileGX support

By Jonas Zaddach Overview Cisco Talos has a new plugin available for IDA Pro that provides a new disassembler for TileGX binaries. This tool should assist researchers in reverse-engineering threats in IDA Pro that target TileGX. We started developing this tool after the VPNFilter campaign last...

CVE-2019-11341

On certain Samsung P9.0 phones, an attacker with physical access can start a TCP Dump capture without the user's knowledge. This feature of the Service Mode application is available after entering the 9900 check code, but is protected by an OTP password. However, this password is created locally...