Lucene search
+L

20433 matches found

NVD
NVD
•added 2024/06/12 2:15 p.m.•56 views

CVE-2024-36699

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

SaveExploits0
UbuntuCve
UbuntuCve
•added 2024/06/12 2:15 p.m.•56 views

CVE-2024-36699

Rejected reason: DO NOT USE THIS CVE RECORD. ConsultIDs: none. Reason: This record was withdrawn by its CNA. Further investigation showed that it was not a security issue. Notes: none...

5.9AI score
SaveExploits0References1
osv_debian
osv_debian
•added 2024/06/12 9:15 a.m.•8 views

DEBIAN-CVE-2024-5742

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS7AI score0.00344EPSS
SaveExploits0References1
NVD
NVD
•added 2024/06/12 9:15 a.m.•37 views

CVE-2024-5742

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS0.00344EPSS
SaveExploits0References6
osv_azl
osv_azl
•added 2024/06/12 9:15 a.m.•17 views

AZL-42619 CVE-2024-5742 affecting package nano for versions less than 6.0-3

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS6.9AI score0.00344EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2024/06/12 9:15 a.m.•28 views

CVE-2024-5742

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS7AI score
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2024/06/12 9:15 a.m.•15 views

UBUNTU-CVE-2024-5742

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS7.1AI score0.00344EPSS
SaveExploits0References4
Mend
Mend
•added 2024/06/12 8:53 a.m.•5 views

CVE-2024-5742

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS0.00344EPSS
SaveExploits0References5
Debian CVE
Debian CVE
•added 2024/06/12 8:53 a.m.•44 views

CVE-2024-5742

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS7AI score0.00344EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2024/06/12 8:53 a.m.•24 views

CVE-2024-5742 Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS7.1AI score0.00344EPSS
SaveExploits0References4
Cvelist
Cvelist
•added 2024/06/12 8:53 a.m.•57 views

CVE-2024-5742 Nano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned file

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS0.00344EPSS
SaveExploits0References4
Fedora
Fedora
•added 2024/06/12 1:32 a.m.•42 views

[SECURITY] Fedora 39 Update: libarchive-3.7.1-2.fc39

Libarchive is a programming library that can create and read several different streaming archive formats, including most popular tar variants, several cpio formats, and both BSD and GNU ar variants. It can also write shar archives and read ISO9660 CDROM images and ZIP archives...

7.8CVSS7.8AI score0.87896EPSS
SaveExploits1
CVE
CVE
•added 2024/06/12 12:00 a.m.•79 views

CVE-2024-36699

The connected records indicate a vulnerability in GNU Debugger (GDB) affecting versions 8.2 through 14.2, caused by a buffer overflow in gdb.selected_inferior().read_memory within utils.c. Red Hat notes a buffer overflow in this component; SUSE and OSV references reinforce the issue as CVE-2024-3...

6.6AI score
SaveExploits0
Positive Technologies
Positive Technologies
•added 2024/06/12 12:00 a.m.•4 views

PT-2024-27132

Name of the Vulnerable Software and Affected Versions GNU Debugger versions 8.2 through 14.2 Description A buffer overflow issue was discovered in the GNU Debugger via the gdb.selected inferior.read memory component at utils.c. Recommendations For GNU Debugger versions 8.2 through 14.2, at the...

6AI score
SaveExploits0References5
OpenVAS
OpenVAS
•added 2024/06/12 12:00 a.m.•46 views

Fedora: Security Advisory (FEDORA-2024-b15a51292f)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS7.8AI score0.87896EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/06/12 12:00 a.m.•3 views

CVE-2024-5742: Improper Link Resolution Before File Access

A vulnerability was found in GNU Nano that allows a possible privilege escalation through an insecure temporary file. If Nano is killed while editing, a file it saves to an emergency file with the permissions of the running user provides a window of opportunity for attackers to escalate privilege...

6.7CVSS6.2AI score0.00344EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
•added 2024/06/12 12:00 a.m.•23 views

RHEL 9 : cockpit (RHSA-2024:3843)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2024:3843 advisory. Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELin...

7.3CVSS7.1AI score0.01191EPSS
SaveExploits0References5
CNNVD
CNNVD
•added 2024/06/12 12:00 a.m.•21 views

Number withdrawn

GNU gdb is a GNU project debugger from the American GNU community. It supports debugging C, C++, Pascal, and FORTRAN programming languages. This CVE number has been withdrawn...

6.8AI score
SaveExploits0References5
osv_alsa
osv_alsa
•added 2024/06/11 12:00 a.m.•31 views

ALSA-2024:3843 Moderate: cockpit security update

Cockpit enables users to administer GNU/Linux servers using a web browser. It offers network configuration, log inspection, diagnostic reports, SELinux troubleshooting, interactive command-line sessions, and more. Security Fixes: cockpit: command injection when deleting a sosreport with a crafted...

7.3CVSS7.2AI score0.01191EPSS
SaveExploits0References4
osv_clsa
osv_clsa
•added 2024/06/10 12:59 p.m.•24 views

CLSA-2024-1718024371 glibc: Fix of CVE-2024-2961

CVE-2024-2961: Fix buffer overflow issue in iconv function when converting strings to ISO-2022-CN-EXT character set...

7.3CVSS7.2AI score0.8833EPSS
SaveExploits19References1
Rows per page
Query Builder