CVE-2018-1000885

PHKP version including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b contains a Improper Neutralization of Special Elements used in a Command 'Command Injection' vulnerability in function pgpexec phkp.php:98 that can result in It is possible to manipulate gpg-keys or execute commands remotely...

EUVD-2019-1924

Malware in sbrugna...

CVE-2019-1010179

PHKP including commit 88fd9cfdf14ea4b6ac3e3967feea7bcaabb6f03b is affected by: Improper Neutralization of Special Elements used in a Command 'Command Injection'. The impact is: It is possible to manipulate gpg-keys or execute commands remotely. The component is: function pgpexec phkp.php:98. The...

CVE-2019-1010179

PHKP (PHP OpenPGP HTTP secret key server protocol) is affected by a Command Injection in the pgp_exec() function of phkp.php:98. The issue stems from improper neutralization of special elements when constructing commands, enabling a remote attacker to manipulate gpg-keys or execute arbitrary comm...

CVE-2016-8007

CVE-2016-8007 affects McAfee Host Intrusion Prevention Services (HIPS) versions prior to 8.0.0.3828 (8.0 Patch 7 and earlier). The root cause is improper permissions on registry keys, enabling a local attacker to bypass authentication by manipulating registry entries under specific conditions. Im...

Debian DSA-2382-1 : ecryptfs-utils - multiple vulnerabilities

Several problems have been discovered in eCryptfs, a cryptographic filesystem for Linux. - CVE-2011-1831 Vasiliy Kulikov of Openwall and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary...

USN-1188-1: eCryptfs vulnerabilities

Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs incorrectly validated permissions on the requested mountpoint. A local attacker could use this flaw to mount to arbitrary locations, leading to privilege escalation. CVE-2011-1831 Vasiliy Kulikov and Dan Rosenberg discovered that eCryptfs...

RSA Key Manager SQL injection Vulnerability ( CVE-2010-1904 )

Product: RSA Key Manager Vendor: EMC/RSA Vulnerable Component: Key Manager Client Vulnerable Component Version: 1.5.x Vulnerability Type: SQL injection Vendor Contact Date: 4/20/2010 Status: Vendor does not want to fix the vulnerability. Vulnerability Details: RSA Key Manager Client software uses...