Lucene search
+L

3549 matches found

NVD
NVD
•added 2020/02/07 3:15 p.m.•33 views

CVE-2019-16155

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted "BackupConfig" type IPC client requests to the fctsched process. Further more...

7.1CVSS7.2AI score0.00443EPSS
SaveExploits1References2
Prion
Prion
•added 2020/02/07 3:15 p.m.•28 views

Privilege escalation

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted "BackupConfig" type IPC client requests to the fctsched process. Further more...

6.6CVSS7.2AI score0.00443EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/02/07 2:47 p.m.•54 views

CVE-2019-16155

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to overwrite system files as root with arbitrary content through system backup file via specially crafted "BackupConfig" type IPC client requests to the fctsched process. Further more...

7.2AI score0.00443EPSS
SaveExploits1References2
NVD
NVD
•added 2020/02/06 4:15 p.m.•28 views

CVE-2019-17652

A stack buffer overflow vulnerability in FortiClient for Linux 6.2.1 and below may allow a user with low privilege to cause FortiClient processes running under root priviledge crashes via sending specially crafted "StartAvCustomScan" type IPC client requests to the fctsched process due the argv...

6.8CVSS6.7AI score0.01448EPSS
SaveExploits1References2
NVD
NVD
•added 2020/02/06 4:15 p.m.•31 views

CVE-2019-16152

A Denial of service DoS vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly...

6.8CVSS6.5AI score0.01381EPSS
SaveExploits1References2
Prion
Prion
•added 2020/02/06 4:15 p.m.•28 views

Denial of service

A Denial of service DoS vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly...

6.8CVSS6.5AI score0.01381EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2020/02/06 3:27 p.m.•38 views

CVE-2019-16152

A Denial of service DoS vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly...

6.5AI score0.01381EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2020/02/06 3:27 p.m.•22 views

CVE-2019-16152

A Denial of service DoS vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly...

7AI score0.01381EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2020/02/06 3:10 p.m.•14 views

CVE-2019-15711

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process...

7.7AI score0.00521EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2020/02/06 3:10 p.m.•39 views

CVE-2019-15711

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process...

7.9AI score0.00521EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/06 12:00 a.m.•9 views

CVE-2019-15711: Undefined Security Weakness

A privilege escalation vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to run system commands under root privilege via injecting specially crafted "ExportLogs" type IPC client requests to the fctsched process...

7.8CVSS7.2AI score0.00521EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/02/06 12:00 a.m.•6 views

CVE-2019-16152: Improper Input Validation

A Denial of service DoS vulnerability in FortiClient for Linux 6.2.1 and below may allow an user with low privilege to cause FortiClient processes running under root privilege crashes via sending specially crafted IPC client requests to the fctsched process due the nanomsg not been correctly...

6.8CVSS6.7AI score0.01381EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2020/01/30 12:00 a.m.•78 views

Ubuntu 18.04 LTS : Linux kernel vulnerabilities (USN-4258-1)

The remote Ubuntu 18.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-4258-1 advisory. It was discovered that the Atheros 802.11ac wireless USB device driver in the Linux kernel did not properly validate device metadata. A physically...

7.8CVSS6.9AI score0.06623EPSS
SaveExploits5References16
Ubuntu
Ubuntu
•added 2020/01/29 12:39 a.m.•215 views

USN-4258-1: Linux kernel vulnerabilities

It was discovered that the Atheros 802.11ac wireless USB device driver in the Linux kernel did not properly validate device metadata. A physically proximate attacker could use this to cause a denial of service system crash. CVE-2019-15099 It was discovered that a race condition existed in the...

7.8CVSS6.6AI score0.06623EPSS
SaveExploits5
OSV
OSV
•added 2020/01/28 7:52 a.m.•17 views

MGASA-2020-0048 Updated libqb packages fix security vulnerability

Insecure treatment of IPC temporary files which could allow a local attacker to overwrite privileged system files CVE-2019-12779...

7.1CVSS6.7AI score0.00655EPSS
SaveExploits1References3
Mageia
Mageia
•added 2020/01/28 7:52 a.m.•44 views

Updated libqb packages fix security vulnerability

Insecure treatment of IPC temporary files which could allow a local attacker to overwrite privileged system files CVE-2019-12779...

7.1CVSS3.9AI score0.00655EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2020/01/27 12:00 a.m.•6 views

PT-2020-6824

Name of the Vulnerable Software and Affected Versions FortiClient for Linux versions 6.2.1 and below Description A stack buffer overflow issue may allow a user with low privilege to cause FortiClient processes running under root privilege to crash via sending specially crafted "StartAvCustomScan"...

7.8CVSS0.01448EPSS
SaveExploits1References6
Fortinet
Fortinet
•added 2020/01/27 12:00 a.m.•99 views

Privilege escalation and DoS in FortiClient for Linux through local IPC socket

A privilege escalation vulnerability in FortiClient for Linux may allow a user with low privilege to run root system commands, overwrite system files or cause FortiClient processes to crash via injecting specially crafted client requests in the IPC socket of the FortiClient process...

7.2CVSS4.2AI score0.01448EPSS
SaveExploits4Affected Software1
RedhatCVE
RedhatCVE
•added 2020/01/26 9:58 p.m.•40 views

CVE-2018-12365

A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system without user consent or interaction. This could result in exposure of private local files. This vulnerability affects Thunderbird 60, Thunderbird 52.9, Firefox ESR 60.1, Firefox...

6.5CVSS1.4AI score0.03158EPSS
SaveExploits0References2
OSS-Fuzz
OSS-Fuzz
•added 2020/01/23 4:55 p.m.•21 views

arrow:arrow-ipc-stream-fuzz: Crash in arrow::ipc::internal::FieldFromFlatbuffer

Project: https://github.com/apache/arrow.git Detailed Report: https://oss-fuzz.com/testcase?key=5185274653179904 Project: arrow Fuzzing Engine: afl Fuzz Target: arrow-ipc-stream-fuzz Job Type: aflasanarrow Platform Id: linux Crash Type: UNKNOWN READ Crash Address: 0x61c100f9e0b8 Crash State:...

6.8AI score
SaveExploits0Affected Software1
Rows per page
Query Builder