2917 matches found
CVE-2019-3699
UNIX Symbolic Link Symlink Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version...
Design/Logic Flaw
UNIX Symbolic Link Symlink Following vulnerability in the packaging of privoxy on openSUSE Leap 15.1, Factory allows local attackers to escalate from user privoxy to root. This issue affects: openSUSE Leap 15.1 privoxy version 3.0.28-lp151.1.1 and prior versions. openSUSE Factory privoxy version...
CVE-2019-3699
CVE-2019-3699 is a local privilege escalation in privoxy packaging on openSUSE Leap 15.1 and openSUSE Factory. The issue arises from UNIX Symbolic Link (symlink) handling during packaging, allowing a non-privileged user (privoxy) to escalate to root. Affected versions include openSUSE Leap 15.1 p...
CVE-2019-3694
A Symbolic Link Symlink Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1...
Design/Logic Flaw
A Symbolic Link Symlink Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1...
CVE-2019-3694 Local privilege escalation from munin to root in the packaging of munin
A Symbolic Link Symlink Following vulnerability in the packaging of munin in openSUSE Factory, Leap 15.1 allows local attackers to escalate from user munin to root. This issue affects: openSUSE Factory munin version 2.0.49-4.2 and prior versions. openSUSE Leap 15.1 munin version 2.0.40-lp151.1.1...
CVE-2019-3692
The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...
CVE-2019-3692
CVE-2019-3692 affects the OpenSUSE/SUSE inn package and enables local privilege escalation from a normal user to root via symlink attacks. Affected packages/versions include SUSE Linux Enterprise Server 11 inn 2.4.2-170.21.3.1 and earlier; openSUSE Factory inn 2.6.2-2.2 and earlier; openSUSE Leap...
CVE-2019-3692 Local privilege escalation from user news to root in the packaging of inn
The packaging of inn on SUSE Linux Enterprise Server 11; openSUSE Factory, Leap 15.1 allows local attackers to escalate from user inn to root via symlink attacks. This issue affects: SUSE Linux Enterprise Server 11 inn version 2.4.2-170.21.3.1 and prior versions. openSUSE Factory inn version...
CVE-2019-3691
A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...
CVE-2019-3691
A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...
CVE-2019-3691 Local privilege escalation from user munge to root
A Symbolic Link Symlink Following vulnerability in the packaging of munge in SUSE Linux Enterprise Server 15; openSUSE Factory allowed local attackers to escalate privileges from user munge to root. This issue affects: SUSE Linux Enterprise Server 15 munge versions prior to 0.5.13-4.3.1. openSUSE...
CVE-2019-3691
CVE-2019-3691 is a local privilege escalation in the munge packaging for SUSE Linux Enterprise Server 15 and openSUSE Factory, caused by a Symbolic Link (Symlink) Following issue. Affected Munge versions are prior to 0.5.13-4.3.1 on SLES 15 and prior to 0.5.13-6.1 on openSUSE Factory. The vulnera...
CVE-2019-18898
UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...
CVE-2019-18898
UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...
Spoofing
UNIX Symbolic Link Symlink Following vulnerability in the trousers package of SUSE Linux Enterprise Server 15 SP1; openSUSE Factory allowed local attackers escalate privileges from user tss to root. This issue affects: SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1...
CVE-2019-18898
CVE-2019-18898 concerns a local symlink attack in the trousers package for SUSE/openSUSE, allowing a local attacker (tss user) to gain ownership of arbitrary files during installation/update. The issue affects SUSE Linux Enterprise Server 15 SP1 trousers versions prior to 0.3.14-6.3.1 and openSUS...
JetBrains TeamCity 2018.2.4 - Remote Code Execution
Exploit Title: JetBrains TeamCity 2018.2.4 - Remote Code Execution Date: 2020-01-07 Exploit Author: Harrison Neal Vendor Homepage: https://www.jetbrains.com/ Software Link: https://confluence.jetbrains.com/display/TW/Previous+Releases+Downloads Version: 2018.2.4 for Windows CVE: CVE-2019-15039...