GLSA-202107-22 : InspIRCd: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202107-22 InspIRCd: Information disclosure InspIRCd incorrectly handled malformed PONG messages, resulting in access of freed memory. Impact : A remote attacker could send crafted packets to the server, possibly allowing them to...

GLSA-202107-40 : MediaWiki: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-40 MediaWiki: Multiple vulnerabilities Multiple vulnerabilities have been discovered in MediaWiki. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202107-20 : Redis: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-20 Redis: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Redis. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202107-55 : SDL 2: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-55 SDL 2: Multiple vulnerabilities Multiple vulnerabilities have been discovered in SDL 2. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202107-27 : OpenEXR: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-27 OpenEXR: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenEXR. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...

GLSA-202107-11 : OpenDoas: Insufficient environment filtering

The remote host is affected by the vulnerability described in GLSA-202107-11 OpenDoas: Insufficient environment filtering OpenDoas does not properly filter the PATH variable from the resulting shell after escalating privileges. Impact : A local attacker with control of a users PATH variable could...

GLSA-202105-19 : Firejail: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202105-19 Firejail: Privilege escalation It was discovered that a flaw in Firejails OverlayFS code allowed restricted programs to escape sandbox. Impact : A local attacker could obtain arbitrary file system access via an applicati...

GLSA-202107-10 : TCG TPM2 Software Stack: Information disclosure

The remote host is affected by the vulnerability described in GLSA-202107-10 TCG TPM2 Software Stack: Information disclosure TCG TPM2 Software Stack did not appropriately apply FAPI policies to protect data encrypted with the trusted platform module. Impact : Data encrypted using TCG TPM2 Softwar...

GLSA-202107-12 : Schism Tracker: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-12 Schism Tracker: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Schism Tracker. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...

GLSA-202107-44 : libslirp: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202107-44 libslirp: Multiple vulnerabilities Multiple vulnerabilities have been discovered in libslirp. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for...

GLSA-202107-01 : corosync: Denial of service

The remote host is affected by the vulnerability described in GLSA-202107-01 corosync: Denial of service It was discovered that corosync allowed an unauthenticated user to cause a Denial of Service by application crash. Impact : A remote attacker could send a malicious crafted packet, possibly...

GLSA-202105-39 : Ceph: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202105-39 Ceph: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Ceph. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...

GLSA-202105-34 : Bash: Privilege escalation

The remote host is affected by the vulnerability described in GLSA-202105-34 Bash: Privilege escalation It was discovered that Bash incorrectly dropped privileges by setting its effective UID to its real UID. Impact : A local attacker could possibly escalate privileges. Workaround : There is no...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

DEBIAN-CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

Authentication flaw

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...

CVE-2022-23220

USBView 2.1 before 2.2 allows some local users e.g., ones logged in via SSH to execute arbitrary code as root because certain Polkit settings e.g., allowany=yes for pkexec disable the authentication requirement. Code execution can, for example, use the --gtk-module option. This affects Ubuntu,...