Lucene search
K

6 matches found

OSV
OSV
added 2022/05/14 12:56 a.m.23 views

GHSA-6XXQ-J39W-G3F6 Puppet Arbitrary Command Execution

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full...

6CVSS6.8AI score0.02632EPSS
Exploits0References25
NVD
NVD
added 2020/10/16 11:15 p.m.18 views

CVE-2020-16910

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

6.2CVSS0.02581EPSS
Exploits0References1
Prion
Prion
added 2020/10/16 11:15 p.m.15 views

Security feature bypass

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

4.3CVSS6.9AI score0.02581EPSS
Exploits0References1Affected Software2
CNVD
CNVD
added 2020/10/16 12:0 a.m.10 views

Microsoft Windows and Windows Server Security Feature Bypass Vulnerability (CNVD-2021-08828)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security feature bypass vulnerability exists in Microsoft Windows and Windows Server. Th...

6.2CVSS8.9AI score0.02581EPSS
Exploits0References1
Prion
Prion
added 2012/05/29 8:55 p.m.25 views

Design/Logic Flaw

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full...

6CVSS7.6AI score0.02632EPSS
Exploits0References17Affected Software5
UbuntuCve
UbuntuCve
added 2012/04/11 1:0 a.m.22 views

CVE-2012-1988

Puppet 2.6.x before 2.6.15 and 2.7.x before 2.7.13, and Puppet Enterprise PE Users 1.0, 1.1, 1.2.x, 2.0.x, and 2.5.x before 2.5.1 allows remote authenticated users with agent SSL keys and file-creation permissions on the puppet master to execute arbitrary commands by creating a file whose full...

6CVSS6.1AI score0.02632EPSS
Exploits0References2
Rows per page
Query Builder