930 matches found
CVE-2022-24696
Mirametrix Glance before 5.1.1.42207 released on 2018-08-30 allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites...
Design/Logic Flaw
Mirametrix Glance before 5.1.1.42207 released on 2018-08-30 allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites...
CVE-2022-24696
Mirametrix Glance before 5.1.1.42207 released on 2018-08-30 allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites...
CVE-2022-24696
Mirametrix Glance vulnerability CVE-2022-24696 affects Glance before 5.1.1.42207 (released 2018-08-30). It allows a local attacker to escalate privileges. The description notes this is unrelated to products from the glance.com and glance.net websites. The connected documents confirm the affected ...
PT-2022-16809
Name of the Vulnerable Software and Affected Versions Mirametrix Glance versions prior to 5.1.1.42207 Description The issue allows a local attacker to elevate privileges. Recommendations For versions prior to 5.1.1.42207, update to version 5.1.1.42207 or later to resolve the issue...
CVE-2022-24696: Undefined Security Weakness
Mirametrix Glance before 5.1.1.42207 released on 2018-08-30 allows a local attacker to elevate privileges. NOTE: this is unrelated to products from the glance.com and glance.net websites...
Lenovo Glance 安全漏洞
Lenovo Glance is an IR camera software from CHN Lenovo Lenovo. Uses the IR camera to provide functionality, such as alerting you when someone scans the screen behind you. A security vulnerability exists in Lenovo Glance by Mirametrix that allows a local attacker to exploit the vulnerability for...
Unauthorized File Access in glance
Versions of glance prior to 3.0.7 are vulnerable to Unauthorized File Access. The package provides a --nodot option meant to hide files and directories with names that begin with a ., such as .git but fails to hide files inside a folder that begins with .. Recommendation Upgrade to version 3.0.7 ...
GHSA-VW7G-JQ9M-3Q9V Unauthorized File Access in glance
Versions of glance prior to 3.0.7 are vulnerable to Unauthorized File Access. The package provides a --nodot option meant to hide files and directories with names that begin with a ., such as .git but fails to hide files inside a folder that begins with .. Recommendation Upgrade to version 3.0.7 ...
PT-2020-21533
Name of the Vulnerable Software and Affected Versions glance versions prior to 3.0.7 Description The issue allows for Unauthorized File Access. The glance package has a --nodot option that is supposed to hide files and directories with names starting with a ., but it fails to hide files inside a...
HP Performance Monitoring xglance Privilege Escalation Exploit
This Metasploit module is an exploit that takes advantage of xglance-bin, part of HP's Glance or Performance Monitoring version 11 and subsequent, which was compiled with an insecure RPATH option. The RPATH includes a relative path to -L/lib64/ which can be controlled by a user. Creating librarie...
HP Performance Monitoring xglance Privilege Escalation
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'HP Performance Monitoring xglance Priv Esc', 'Description' = %q This exploit takes advantage of xglance-bin, part of HP's Glance or Performance...
Cross-site Scripting (XSS)
OpenStack Dashboard Horizon provides administrators and users with a graphical interface to access, provision, and automate cloud-based resources. Two security issues were discovered in the Horizon dashboard and are addressed in this update: A cross-site scripting XSS flaw was found in the Horizo...
Denial Of Service (DoS)
OpenStack Image Service glance provides discovery, registration, and delivery services for disk and server images. It provides the ability to copy or snapshot a server image, and immediately store it away. Stored images can be used as a template to get new servers up and running quickly and more...
Denial Of Service (DoS)
Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. This update addresses the following issues: This package rebases mariadb-galera to 5.5.42, fixing an issue...
Denial Of Service (DoS)
Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. This update addresses the following issues: This package rebases mariadb-galera to 5.5.42, fixing an issue...
Denial Of Service (DoS)
Red Hat Enterprise Linux OpenStack Platform provides the facilities for building a private or public infrastructure-as-a-service IaaS cloud running on commonly available physical hardware. This update addresses the following issues: This package rebases mariadb-galera to 5.5.42, fixing an issue...
Unauthorized File Access
Overview Versions of glance prior to 3.0.7 are vulnerable to Unauthorized File Access. The package provides a --nodot option meant to hide files and directories with names that begin with a ., such as .git but fails to hide files inside a folder that begins with .. Recommendation Upgrade to versi...
Information Disclosure
glance is vulnerable to information disclosure. A remote attacker is able to access and retrieve arbitrary files in a dot directory within the web server directory via URIs such as /.git/HEAD or /.got/logs/HEAD...
Node.js third-party modules: [glance] Access unlisted internal files/folders revealing sensitive information
I would like to report sensitive information disclosure in glance. Similar to 486933 in ways Module module name: glance version: 3.0.5 npm page: https://www.npmjs.com/package/glance Module Description a quick disposable http server for static files Module Stats weekly downloads 41 Vulnerability...