6615 matches found
GLSA-202003-06 : Ruby: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-202003-06 Ruby: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Ruby. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could execute arbitrary code, have...
GLSA-202003-07 : RabbitMQ C client: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-202003-07 RabbitMQ C client: Arbitrary code execution It was discovered that RabbitMQ C client incorrectly handled certain inputs. Impact : A remote attacker, by sending a specially crafted request, could possibly execute arbitrar...
GLSA-202003-01 : Groovy: Arbitrary code execution
The remote host is affected by the vulnerability described in GLSA-202003-01 Groovy: Arbitrary code execution It was discovered that there was a vulnerability within the Java serialization/deserialization process. Impact : An attacker, by crafting a special serialized object, could execute...
CVE-2019-20384
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners...
CVE-2019-20384
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners...
Design/Logic Flaw
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners...
CVE-2019-20384
Gentoo Portage through 2.3.84 allows local users to place a Trojan horse plugin in the /usr/lib64/nagios/plugins directory by leveraging access to the nagios user account, because this directory is writable in between a call to emake and a call to fowners...
CVE-2019-20384
CVE-2019-20384 affects Gentoo Portage up to version 2.3.84. The issue arises from a writable /usr/lib64/nagios/plugins directory between emake and fowners calls, allowing a local attacker with Nagios access to place a Trojan plugin. Impact is a local privilege/impersonation risk (I/H) with a low ...
Unspecified Vulnerability in Gentoo Portage
Gentoo is an open source Linux system from the Gentoo Foundation.Gentoo Portage is one of the package managers. A security vulnerability exists in Gentoo Portage 2.3.84 and earlier versions, which originates from a write operation to the /usr/lib64/nagios/plugins directory between calls to emake...
DEBIAN-CVE-2019-19882
shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing...
CVE-2019-19882
shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing...
CVE-2019-19882
shadow 4.8, in certain circumstances affecting at least Gentoo, Arch Linux, and Void Linux, allows local users to obtain root access because setuid programs are misconfigured. Specifically, this affects shadow 4.8 when compiled using --with-libpam but without explicitly passing...
CVE-2019-19882
CVE-2019-19882 affects Shadow 4.8 when built with --with-libpam but without --disable-account-tools-setuid and without a PAM config compatible with setuid tools, enabling local users to escalate to root via account-management utilities (groupadd, groupdel, groupmod, useradd, userdel, usermod). Th...
GLSA-201911-05 : Adobe Flash Player: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201911-05 Adobe Flash Player: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Adobe Flash Player. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE...
GLSA-201911-06 : Chromium, Google Chrome: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201911-06 Chromium, Google Chrome: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium and Google Chrome. Please review the CVE identifiers referenced below for details. Impact : Please review the...
GLSA-201911-08 : Expat: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201911-08 Expat: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Expat. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for details...
GLSA-201911-04 : OpenSSL: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201911-04 OpenSSL: Multiple vulnerabilities Multiple vulnerabilities have been discovered in OpenSSL. Please review the CVE identifiers referenced below for details. Impact : Please review the referenced CVE identifiers for detail...
CVE-2013-1771
The web server Monkeyd produces a world-readable log /var/log/monkeyd/master.log on gentoo...