CVE-2026-96419

A flaw was found in Wireshark. Due to improper pathname validation during configuration profile imports, an attacker could convince a user to import a maliciously crafted profile. Successful exploitation could allow arbitrary code execution or cause an application crash, resulting in a Denial of...

keepalived security update

CentOS Errata and Security Advisory CESA-2019:2285 An update for keepalived is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severi...

RHEL 7 : keepalived (RHSA-2019:2285)

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2019:2285 advisory. The keepalived utility provides simple and robust facilities for load balancing and high availability. The load balancing framework relies on the...

Arbitrary File Overwrite

keepalived is vulnerable to arbitrary file overwrite. The vulnerability exists as there is an improper pathname validation that allows for overwrite of arbitrary filenames via symlinks...

CVE-2015-3709: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in kext tools in Apple OS X before 10.10.4 allows local users to bypass intended signature requirements for kernel extensions by leveraging improper pathname validation...

PT-2015-6461

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 3.160 Description The issue is related to improper pathname validation, allowing local users to gain privileges through a crafted INF file. Recommendations For Cisco AnyConnect Secure Mobility...