12105 matches found
CVE-2019-19609: Improper Neutralization of Special Elements used in an OS Command
The Strapi framework before 3.0.0-beta.17.8 is vulnerable to Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel, because it does not sanitize the plugin name, and attackers can inject arbitrary shell commands to be executed by the execa function...
PT-2019-15885
Name of the Vulnerable Software and Affected Versions Strapi framework versions prior to 3.0.0-beta.17.8 Description The issue allows for Remote Code Execution in the Install and Uninstall Plugin components of the Admin panel. This is due to the lack of sanitization of the plugin name, enabling...
Strapi Admin Panel Install and Uninstall Plugin Component Remote Code Execution Vulnerability
Strapi is an open source headless content management system CMS. install and Uninstall Plugin is one of the install and uninstall plugin . A remote code execution vulnerability exists in the Install and Uninstall Plugin component of the Admin panel in Strapi, which stems from the program's failur...
Fedora Update for kernel FEDORA-2019-8846a1a5a2
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
CVE-2019-5212
There is an improper access control vulnerability in Huawei Share. The software does not properly restrict access to certain file from certain application. An attacker tricks the user into installing a malicious application then establishing a connect to the attacker through Huawei Share,...
Android-Gif-Drawable Double-Free Vulnerability
A double free vulnerability in the DDGifSlurp function in decoding.c in libpldroidsonroidsgif before 1.2.15, as used in WhatsApp for Android before 2.19.244, allows remote attackers to execute arbitrary code or cause a denial of service. CVE-2019-11932 is a vulnerability in the android-gif-drawab...
Cisco IOS Software Smart Install DoS (cisco-sa-20180328-smi)
According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Smart Install feature due to improper validation of packet data. An unauthenticated, remote attacker can exploit this by sending a crafted packet to an affected device on TCP port 4786 in...
Cisco IOS XE Software Smart Install DoS (cisco-sa-20180328-smi)
According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Smart Install feature due to improper validation of packet data. An unauthenticated, remote attacker can exploit this by sending a crafted packet to an affected device on TCP...
Sony keyaki_kddi has an unspecified vulnerability.
Sony keyakikddi is a smartphone from Sony Japan. Sony keyakikddi build fingerprint: Sony/keyakikddi/keyakikddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys has a security vulnerability in the com.kddi. android.packageinstaller app contains a security vulnerability. An attacker could exploit...
Security Update for Microsoft Visual Studio Code (CVE-2019-1414)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.39.1. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer. A...
RubyGems install_location Arbitrary File Access
The vulnerability of the installlocation function in the RubyGems package management system exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to arbitrary files...
DEBIAN-CVE-2019-19191
Shibboleth Service Provider SP 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user the shibd account after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow...
Exadata Plug-In Deploy and Install Sub-component Privilege Escalation
The vulnerability of the Exadata Plug-In Deploy and Install component of the Enterprise Manager for Exadata software from Oracle involves access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using t...
CVE-2014-0023
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...
Design/Logic Flaw
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...
CVE-2014-0023
CVE-2014-0023 affects Red Hat OpenShift. The OpenShift installation script contains a temporary file creation vulnerability that can lead to arbitrary code execution. The issue is documented across multiple sources (e.g., NVD, CNVD) as a temporary-file-related weakness enabling code execution, wi...
CVE-2014-0023
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...
CVE-2014-0023: Exposure of Resource to Wrong Sphere
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...
PT-2019-7034
Name of the Vulnerable Software and Affected Versions OpenShift affected versions not specified Description The issue is related to a temporary file creation vulnerability in the install script, which can lead to arbitrary code execution. Recommendations At the moment, there is no information abo...