22 matches found
CVE-2018-9862: Inappropriate Encoding for Output Context
util.c in runV 1.0.0 for Docker mishandles a numeric username, which allows attackers to obtain root access by leveraging the presence of an initial numeric value on an /etc/passwd line, and then issuing a "docker exec" command with that value in the -u argument, a similar issue to CVE-2016-3697...
7.8CVSS7.3AI score0.00423EPSS
SaveExploits0References2
SuSE 11 Security Update : PostgreSQL (SAT Patch Number 674)
Remote authenticated users could crash the postgresql server by requesting a conversion with an inappropriate encoding. CVE-2009-0922 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The tex...
4CVSS5.3AI score0.10242EPSS
SaveExploits3References3
20