15 matches found
EUVD-2026-10332
Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null pointer and crashes...
CVE-2026-2261 blocklistd(8) socket leak
Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null pointer and crashes...
PT-2026-24060
Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a null pointer and crashes...
FreeBSD Security Advisory - FreeBSD-SA-26:03.blocklistd
FreeBSD Security Advisory - Due to a programming error, blocklistd leaks a socket descriptor for each adverse event report it receives. Once a certain number of leaked sockets is reached, blocklistd becomes unable to run the helper script: a child process is forked, but this child dereferences a...
EUVD-2017-0182
Malware in sbrugna...
EUVD-2024-25933
Malicious code in bioql PyPI...
CVE-2024-28851
The CVE-2024-28851 entry concerns the Snowflake Hive MetaStore Connector. The root issue is a vulnerability in the helper script used by the Hive MetaStore Connector, which could allow a malicious insider with local access to download content from a Microsoft domain, replace valid content with ma...
CVE-2024-28851 Elevation of privilege in Snowflake Hive MetaStore Connector Helper script
The Snowflake Hive metastore connector provides an easy way to query Hive-managed data via Snowflake. Snowflake Hive MetaStore Connector has addressed a potential elevation of privilege vulnerability in a helper script for the Hive MetaStore Connector. A malicious insider without admin privileges...
K11922628: NGINX Controller sensitive command-line arguments vulnerability CVE-2020-5866
Security Advisory Description The helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments. CVE-2020-5866 Impact The affected script causes sensitive items to display in the system process listing ps , top while the helper.s...
CVE-2020-28911
Incorrect Access Control in Nagios Fusion 4.1.8 and earlier allows low-privileged authenticated users to extract passwords used to manage fused servers via the testserver command in ajaxhelper.php...
F5 NGINX Controller Information Disclosure Vulnerability
F5 NGINX Controller is a centralized monitoring and management platform for NGINX from F5. The platform supports the management of multiple NGINX instances using a visual interface. A security vulnerability exists in the helper.sh script in F5 NGINX Controller versions prior to 3.3.0. An attacker...
CVE-2020-5866
In versions of NGINX Controller prior to 3.3.0, the helper.sh script, which is used optionally in NGINX Controller to change settings, uses sensitive items as command-line arguments...
Router 0day vulnerability discovery practical-vulnerability warning-the black bar safety net
! Last year 7 month in the company's internal share over this issue, said to also almost a year, too lazy to now only issued to. In 2018, 3, 4 on more than two or three months time, spent more and more time to engage in a domestic router, dug some holes, after also don't get it. Also wrote a litt...
Back In Time competitive conditions loophole
Back In Time aka backintime is a suite of Linux backup tools. A competitive condition vulnerability exists in the 'checkPolkitPrivilege' function of the serviceHelper.py file in Back In Time 1.1.18 and earlier versions. An attacker can exploit this vulnerability to replace the user's request...
Security fix for the ALT Linux 10 package dnsmasq version 2.65-alt1
March 6, 2013 Mikhail Efremov 2.65-alt1 - Patch from Fedora: + Fix for CVE-2013-0198 checking of TCP connection interfaces - Improved resolvconf support. - Added dnsmasq.service. - Added dnsmasq-helper script. - Drop 'build without resolvconf' support. - Updated to 2.65...