Lucene search
+L

1319 matches found

Positive Technologies
Positive Technologies
•added 2020/02/18 12:00 a.m.•4 views

PT-2020-20558

Name of the Vulnerable Software and Affected Versions ESET Smart Security Premium versions prior to 1294 ESET Internet Security versions prior to 1294 ESET NOD32 Antivirus versions prior to 1294 ESET Cyber Security Pro macOS versions prior to 1294 ESET Cyber Security macOS versions prior to 1294...

5.5CVSS0.0121EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
•added 2020/02/18 12:00 a.m.•4 views

PT-2020-6088

Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server version 11.5 Description The issue is related to insufficient sanitization of special elements in output used by an incoming component, which can be exploited by a remote attacker...

6.5CVSS0.01395EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/07 12:00 a.m.•7 views

CVE-2019-16155: Undefined Security Weakness

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted "BackupConfig" type IPC client requests to the fctsched process. Further more...

7.1CVSS7.1AI score0.00443EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/06 12:00 a.m.•6 views

CVE-2019-16152: Improper Input Validation

A Denial of service DoS vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly...

6.8CVSS6.7AI score0.01381EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/06 12:00 a.m.•8 views

CVE-2019-17652: Out-of-bounds Write

A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to cause FortiClient processes running under root priviledge crashes via sending specially crafted "StartAvCustomScan" type IPC client requests to the fctsched process due the argv...

6.8CVSS7AI score0.01448EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/06 12:00 a.m.•9 views

CVE-2019-15711: Undefined Security Weakness

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process...

7.8CVSS7.2AI score0.00521EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2020/01/27 12:00 a.m.•6 views

PT-2020-6824

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below Description A stack buffer overflow issue may allow a user with low privilege to cause FortiClient processes running under root privilege to crash via sending specially crafted "StartAvCustomScan"...

7.8CVSS0.01448EPSS
SaveExploits1References6
NVD
NVD
•added 2020/01/24 10:15 p.m.•29 views

CVE-2019-1353

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux also known as "WSL" while accessing a working directory on a regular Windows drive, none of the NTFS...

9.8CVSS9.3AI score0.02244EPSS
SaveExploits0References5
osv-cve
osv-cve
•added 2020/01/24 10:15 p.m.•37 views

CVE-2019-1353

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux also known as "WSL" while accessing a working directory on a regular Windows drive, none of the NTFS...

9.8CVSS6.6AI score
SaveExploits0References5
osv-debian
osv-debian
•added 2020/01/24 10:15 p.m.•17 views

DEBIAN-CVE-2019-1353

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux also known as "WSL" while accessing a working directory on a regular Windows drive, none of the NTFS...

9.8CVSS7.5AI score0.02244EPSS
SaveExploits0References1
Mend
Mend
•added 2020/01/24 9:14 p.m.•5 views

CVE-2019-1353

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux also known as "WSL" while accessing a working directory on a regular Windows drive, none of the NTFS...

9.8CVSS0.02244EPSS
SaveExploits0References10
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/24 12:00 a.m.•6 views

CVE-2019-1353: Undefined Security Weakness

An issue was found in Git before v2.24.1, v2.23.1, v2.22.2, v2.21.1, v2.20.2, v2.19.3, v2.18.2, v2.17.3, v2.16.6, v2.15.4, and v2.14.6. When running Git in the Windows Subsystem for Linux also known as "WSL" while accessing a working directory on a regular Windows drive, none of the NTFS...

9.8CVSS7.6AI score0.02244EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2020/01/22 12:00 a.m.•15 views

The compatibility subsystem for running Linux applications allows Windows Subsystem for Linux (WSL) operating systems, enabling attackers to enhance their privileges.

The vulnerability of the compatibility subsystem for running Linux applications in Windows Subsystem for Linux WSL operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

7.8CVSS7.2AI score0.00814EPSS
SaveExploits0References3
CNVD
CNVD
•added 2020/01/15 12:00 a.m.•17 views

Snare for Linux Password Disclosure Vulnerability

Snare for Linux is a log collection and analysis tool for Linux-based platforms. A security vulnerability exists in versions of Snare prior to 1.7.0 for Linux-based platforms, which stems from a rendered page containing a RemotePassword field. An attacker can exploit this vulnerability to obtain ...

7.5CVSS6.8AI score0.01076EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/14 12:00 a.m.•6 views

CVE-2020-0636: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the Windows Subsystem for Linux handles files, aka 'Windows Subsystem for Linux Elevation of Privilege Vulnerability'...

7.8CVSS7.3AI score0.00814EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2020/01/14 12:00 a.m.•4 views

PT-2020-1311

Name of the Vulnerable Software and Affected Versions Windows Subsystem for Linux WSL affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the way the Windows Subsystem for Linux handles files. This vulnerability is associated with...

7.8CVSS0.00814EPSS
SaveExploits0References4
Symantec
Symantec
•added 2020/01/14 12:00 a.m.•41 views

Microsoft Windows Subsystem for Linux CVE-2020-0636 Local Privilege Escalation Vulnerability

Description Microsoft Windows Subsystem for Linux is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to gain elevated privileges. Technologies Affected Microsoft Windows 10 Version 1903 for 32-bit Systems Microsoft Windows 10 Version 1903 for ARM64-based...

2.7AI score0.00814EPSS
SaveExploits0Affected Software2
NVD
NVD
•added 2020/01/08 11:15 p.m.•30 views

CVE-2011-5250

Snare for Linux before 1.7.0 has CSRF in the web interface...

6.5CVSS6.7AI score0.0066EPSS
SaveExploits1References2
NVD
NVD
•added 2020/01/08 11:15 p.m.•27 views

CVE-2011-5247

Snare for Linux before 1.7.0 has password disclosure because the rendered page contains the field RemotePassword...

7.5CVSS7.6AI score0.01076EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2020/01/08 10:38 p.m.•32 views

CVE-2011-5250

Snare for Linux before 1.7.0 has CSRF in the web interface...

6.7AI score0.0066EPSS
SaveExploits1References2
Rows per page
Query Builder