Lucene search
+L

1486 matches found

Fedora
Fedora
added 2019/09/16 12:3 a.m.16 views

[SECURITY] Fedora 31 Update: blis-0.6.0-4.fc31

BLIS is a portable software framework for instantiating high-performance BLAS-like dense linear algebra libraries. The framework was designed to isolate essential kernels of computation that, when optimized, immediately enable optimized implementations of most of its commonly used and...

3.9AI score
Exploits0
Kitploit
Kitploit
added 2019/08/31 1:0 p.m.319 views

0xsp Mongoose v1.7 - Linux/Windows Privilege Escalation intelligent Enumeration Toolkit

Using 0xsp mongoose you will be able to scan targeted operating system for any possible way for privilege escalation attacks, starting from collecting information stage until reporting information through 0xsp Web Application API. user will be able to scan different Linux / windows Operation...

7.5AI score
Exploits0References1
CNVD
CNVD
added 2019/08/30 12:0 a.m.30 views

IBM DB2 High Performance Unload Elevation of Privilege Vulnerability

IBM DB2, etc. are products of IBM Corporation in the U.S.A. DB2 is a relational database management system.Opera Software Opera, etc. are products of Norway's Opera Software.Opera is a Web browser and IBM DB2 is a relational database management system. An elevation of privilege vulnerability exis...

8.4CVSS7.9AI score0.00336EPSS
Exploits0References1
OSV
OSV
added 2019/08/26 3:15 p.m.5 views

CVE-2019-4447

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpumdebug is a setuid root binary which trusts the PATH environment variable. A low privileged user can execute arbitrary commands as root by altering the PATH variable to point to a...

7.8CVSS6AI score0.0045EPSS
Exploits0References2
NVD
NVD
added 2019/08/26 3:15 p.m.22 views

CVE-2019-4447

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpumdebug is a setuid root binary which trusts the PATH environment variable. A low privileged user can execute arbitrary commands as root by altering the PATH variable to point to a...

8.4CVSS8.1AI score0.0045EPSS
Exploits0References2
Prion
Prion
added 2019/08/26 3:15 p.m.20 views

Code injection

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpumdebug binaries are setuid root and have built-in options that allow an low privileged user the ability to load arbitrary db2 libraries from a privileged context. This...

7.2CVSS7.3AI score0.00336EPSS
Exploits0References2Affected Software1
Prion
Prion
added 2019/08/26 3:15 p.m.19 views

Code injection

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpumdebug is a setuid root binary which trusts the PATH environment variable. A low privileged user can execute arbitrary commands as root by altering the PATH variable to point to a...

7.2CVSS7.6AI score0.0045EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/08/26 2:40 p.m.48 views

CVE-2019-4447

CVE-2019-4447 affects IBM DB2 High Performance Unload on LUW versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2. The db2hpum_debug binary is setuid root and trusts PATH; a low-privilege user can hijack PATH to execute arbitrary commands as root, with a crash potentially tri...

8.4CVSS7.8AI score0.0045EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2019/08/26 2:40 p.m.57 views

CVE-2019-4448

CVE-2019-4448 affects IBM DB2 High Performance Unload (HPU) load for LUW. The vulnerable binaries db2hpum and db2hpum_debug are setuid root and provide built-in options to load arbitrary libraries from a privileged context, enabling a low-privilege user to execute arbitrary code with root authori...

8.4CVSS7.4AI score0.00336EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2019/08/26 2:40 p.m.33 views

CVE-2019-4448

IBM DB2 High Performance Unload load for LUW 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 db2hpum and db2hpumdebug binaries are setuid root and have built-in options that allow an low privileged user the ability to load arbitrary db2 libraries from a privileged context. This...

8.4CVSS7.4AI score0.00336EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2019/08/26 12:0 a.m.14 views

PT-2019-17087 · Ibm +1 · Ibm Db2 High Performance Unload +1

Name of the Vulnerable Software and Affected Versions: IBM DB2 High Performance Unload load for LUW versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 Description: The issue concerns a setuid root binary db2hpum debug that trusts the PATH environment variable. A...

8.4CVSS8.3AI score0.0045EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2019/08/26 12:0 a.m.8 views

PT-2019-17088 · Ibm · Ibm Db2 High Performance Unload

Name of the Vulnerable Software and Affected Versions: IBM DB2 High Performance Unload load for LUW versions 6.1, 6.1.0.1, 6.1.0.1 IF1, 6.1.0.2, 6.1.0.2 IF1, and 6.1.0.1 IF2 Description: The issue allows a low-privileged user to execute arbitrary code with root authority by loading arbitrary db2...

8.4CVSS8.3AI score0.00336EPSS
Exploits0References3
CNVD
CNVD
added 2019/08/22 12:0 a.m.4 views

WordPress gregs-high-performance-seo plugin cross-site scripting vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. gregs-high-performance-seo is an SEO Search Engine Optimization plugin used in it. A cross-site scripting vulnerability exists in the...

6.1CVSS6.3AI score0.00913EPSS
Exploits0References1
NVD
NVD
added 2019/08/20 4:15 p.m.18 views

CVE-2015-9319

The gregs-high-performance-seo plugin before 1.6.2 for WordPress has XSS in the context of an old browser...

6.1CVSS6.1AI score0.00913EPSS
Exploits0References1
CVE
CVE
added 2019/08/20 3:19 p.m.41 views

CVE-2015-9319

CVE-2015-9319 concerns the WordPress plug‑in Gregs High Performance SEO (before 1.6.2) with a cross-site scripting (XSS) vulnerability in the context of an old browser. Multiple sources (NVD and vendor/security bulletins) corroborate that the flaw affects this plugin and is XSS‑related; exploitat...

6.1CVSS6AI score0.00913EPSS
Exploits0References1Affected Software1
Fedora
Fedora
added 2019/08/14 1:42 a.m.47 views

[SECURITY] Fedora 29 Update: squid-4.8-2.fc29

Squid is a high-performance proxy caching server for Web clients, supporting FTP, gopher, and HTTP data objects. Unlike traditional caching software, Squid handles all requests in a single, non-blocking, I/O-driven process. Squid keeps meta data and especially hot objects cached in RAM, caches DN...

9.8CVSS8.3AI score0.74477EPSS
Exploits1
OpenVAS
OpenVAS
added 2019/07/31 12:0 a.m.35 views

Fedora Update for squid FEDORA-2019-c1e06901bc

The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

6.1CVSS7.1AI score0.74477EPSS
Exploits1References2
Fedora
Fedora
added 2019/06/30 12:58 a.m.32 views

[SECURITY] Fedora 30 Update: pdns-4.1.10-1.fc30

The PowerDNS Nameserver is a modern, advanced and high performance authoritative-only nameserver. It is written from scratch and conforms to all relevant DNS standards documents. Furthermore, PowerDNS interfaces with almost any database...

7.5CVSS1.4AI score0.01691EPSS
Exploits0
Fedora
Fedora
added 2019/05/16 3:18 a.m.29 views

[SECURITY] Fedora 29 Update: memcached-1.5.14-1.fc29

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load...

7.5CVSS2.8AI score0.02958EPSS
Exploits1
Fedora
Fedora
added 2019/05/16 12:52 a.m.27 views

[SECURITY] Fedora 30 Update: memcached-1.5.14-1.fc30

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load...

7.5CVSS2.8AI score0.02958EPSS
Exploits1
Rows per page
Query Builder