10407 matches found
Cisco IOS Software Smart Install DoS (cisco-sa-20180328-smi)
According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Smart Install feature due to improper validation of packet data. An unauthenticated, remote attacker can exploit this by sending a crafted packet to an affected device on TCP port 4786 in...
Cisco IOS XE Software Smart Install DoS (cisco-sa-20180328-smi)
According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Smart Install feature due to improper validation of packet data. An unauthenticated, remote attacker can exploit this by sending a crafted packet to an affected device on TCP...
Sony keyaki_kddi has an unspecified vulnerability.
Sony keyakikddi is a smartphone from Sony Japan. Sony keyakikddi build fingerprint: Sony/keyakikddi/keyakikddi:7.1.1/TONE3-3.0.0-KDDI-170517-0326/1:user/dev-keys has a security vulnerability in the com.kddi. android.packageinstaller app contains a security vulnerability. An attacker could exploit...
Security Update for Microsoft Visual Studio Code (CVE-2019-1414)
The version of Microsoft Visual Studio Code installed on the remote Windows host is prior to 1.39.1. It is, therefore, affected by the following vulnerability: - An elevation of privilege vulnerability exists in Visual Studio Code when it exposes a debug listener to users of a local computer. A...
The vulnerability of the `install_location` function in the RubyGems package management system allows a hacker to gain access to arbitrary files.
The vulnerability of the installlocation function in the RubyGems package management system exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to arbitrary files...
DEBIAN-CVE-2019-19191
Shibboleth Service Provider SP 3.x before 3.1.0 shipped a spec file that calls chown on files in a directory controlled by the service user the shibd account after installation. This allows the user to escalate to root by pointing symlinks to files such as /etc/shadow...
The vulnerability of the Exadata Plug-In Deploy and Install sub-component, as well as the Enterprise Manager for Exadata software platform of Oracle Enterprise Manager, allows a hacker to gain full control over the application.
The vulnerability of the Exadata Plug-In Deploy and Install component of the Enterprise Manager for Exadata software from Oracle involves access control deficiencies. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain full control over the application using t...
CVE-2014-0023
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...
Design/Logic Flaw
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...
CVE-2014-0023
OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...
CVE-2014-0023
CVE-2014-0023 affects Red Hat OpenShift. The OpenShift installation script contains a temporary file creation vulnerability that can lead to arbitrary code execution. The issue is documented across multiple sources (e.g., NVD, CNVD) as a temporary-file-related weakness enabling code execution, wi...
CVE-2019-18895
Scanguard through 2019-11-12 on Windows has Insecure Permissions for the installation directory, leading to privilege escalation via a Trojan horse executable file...
Fedora Update for kernel FEDORA-2019-1689d3fe07
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Fedora Update for kernel FEDORA-2019-7a3fc17778
The remote host is missing an update for the Copyright C 2019 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Microsoft Edge Security Bypass Vulnerability (CNVD-2019-42801)
Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge EdgeHTML-based, which arises from the program failing to properly handle extension requests and failing to request host privileges for...
Cisco IOS XE Software Smart Install Memory Leak (cisco-sa-20160928-smi)
According to its self-reported version, Cisco IOS XE Software is affected by a denial of service DoS vulnerability in the Smart Install client feature due to incorrect handling of image list parameters. An unauthenticated, remote attacker can exploit this, by sending crafted Smart Install packets...
Cisco IOS Smart Install Memory Leak (cisco-sa-20160928-smi)
According to its self-reported version, Cisco IOS is affected by a denial of service DoS vulnerability in the Smart Install client feature due to incorrect handling of image list parameters. An unauthenticated, remote attacker can exploit this, by sending crafted Smart Install packets to TCP port...
threat_note - DPS' Lightweight Investigation Notebook
threatnote is a web application built by Defense Point Security to allow security researchers the ability to add and retrieve indicators related to their research. As of right now this includes the ability to add IP Addresses, Domains and Threat Actors, with more types being added in the future...
SUSE-SU-2019:2930-1 Security update for SUSE Manager Server 4.0
This update fixes the following issues: cobbler: - Fix for install loop caused autoinstallation profiles bsc1151875 - Update module config description to match new parameters - Add config migration script and runs it in post-install script - Fix for config backups in post install script bsc114907...
