601 matches found
CVE-2022-20721
Multiple vulnerabilities in the Cisco IOx application hosting environment on multiple Cisco platforms could allow an attacker to inject arbitrary commands into the underlying host operating system, execute arbitrary code on the underlying host operating system, install applications without being...
PT-2022-2299 · Cisco · Cisco Iox +1
Name of the Vulnerable Software and Affected Versions: Cisco IOx affected versions not specified Description: The issue exists due to incorrect restriction of the directory path name with limited access. An attacker could inject arbitrary commands into the underlying host operating system, execut...
EulerOS 2.0 SP3 : kernel (EulerOS-SA-2022-1171)
According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In the nl80211policy policy of nl80211.c, there is a possible out of bounds read due to a missing bounds check. This could lead to local...
Arbitrary Code Execution
docker-cli-js is vulnerable to arbitrary code execution. An attacker is able to potentially execute arbitrary commands on the host OS when that attacker has at least partial control over command parameter of the Docker.command method...
CVE-2021-41569
SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...
CVE-2021-41569
SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...
Default credentials
SAS/Intrnet 9.4 build 1520 and earlier allows Local File Inclusion. The samples library included by default in the appstart.sas file, allows end-users of the application to access the sample.webcsf1.sas program, which contains user-controlled macro variables that are passed to the DS2CSF macro...
Debian DSA-4984-1 : flatpak - security update
The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dsa-4984 advisory. - Flatpak is a system for building, distributing, and running sandboxed desktop applications on Linux. In versions prior to 1.10.4 and 1.12.0, Flatpak apps with direct...
Flatpak input validation error vulnerability
Flatpak is a suite of application virtualization systems for Linux desktop application computing environments. versions prior to Flatpak 1.12.0 and 1.10.4 contain an input validation error vulnerability that stems from direct access to AFUNIX sockets such as those used by Wayland, Pipewire or...
RHEL 8 : kpatch-patch (RHSA-2021:3442)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:3442 advisory. This is a kernel live patch module which is automatically loaded by the RPM post-install script to modify the code of a running kernel...
SUSE SLES12: kernel-livepatch-4_12_14-150_75-default / etc (SUSE-SU-2021:2695-1)
The remote SUSE Linux SLES12 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2695-1 advisory. This update for the Linux Kernel 4.12.14-12280 fixes several issues. The following security issues were fixed: - CVE-2021-22543: Fixed...
SUSE SLED15: cluster-md-kmp-default / dlm-kmp-default / gfs2-kmp-default / etc (SUSE-SU-2021:2756-1)
The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2756-1 advisory. The SUSE Linux Enterprise 15 SP2 kernel was updated to receive various security and bugfixes. The following security bugs were fixed: ...
Arbitrary Code Execution
binutils is vulnerable to arbitrary code execution. An attacker who successfully tricks a user into using readelf to read a malicious file can exploit a stack buffer overflow and out-of-bounds write of malicious data supplied by the attacker and execute arbitrary code on the host OS...
Arbitrary Code Execution
ffmpeg is vulnerable to arbitrary code execution. A heap-based buffer overflow vulnerability in libavcodec/getbits.h when writing .mov files allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
firefox is vulnerable to arbitrary code execution. A vulnerability within the application that leads to memory corruption allows an attacker to execute arbitrary code on the host OS...
SUSE SLES15: kernel-azure / kernel-azure-devel / kernel-devel-azure / etc (SUSE-SU-2021:2646-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:2646-1 advisory. The SUSE Linux Enterprise 15 SP2 Azure kernel was updated to receive various security and bugfixes. The following security bugs were fixed: -...
Arbitrary Code Execution
virtualbox is vulnerable to arbitrary code execution. A difficult to exploit vulnerability allows a low privileged attacker with logon to the infrastructure to execute arbitrary code on the host OS...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. A use-after-free in the GPU component of the Chromium browser allows an attacker to execute arbitrary code on the host OS...
Arbitrary Code Execution
chromium is vulnerable to arbitrary code execution. A heap-based buffer overflow in the WebGL component allows an attacker to execute arbitrary code on the host OS...