23249 matches found
CVE-2016-4983
A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...
CVE-2016-4983
A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...
CVE-2016-4983
A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...
CVE-2016-4983
A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...
CVE-2016-4983
A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...
CVE-2016-4983: Incorrect Permission Assignment for Critical Resource
A postinstall script in the dovecot rpm allows local users to read the contents of newly created SSL/TLS key files...
DEBIAN-CVE-2017-5331
Integer overflow in the checkoffset function in b/wrestool/fileread.c in icoutils before 0.31.1 allows local users to cause a denial of service process crash and execute arbitrary code via a crafted executable...
CVE-2019-18684
Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo process. This occurs because of a race condition between determining a uid, and the setresuid and openat system calls. The attacker can write "ALL ALL=ALL NOPASSWD:ALL" to...
CVE-2019-18684
Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo process. This occurs because of a race condition between determining a uid, and the setresuid and openat system calls. The attacker can write "ALL ALL=ALL NOPASSWD:ALL" to...
CVE-2019-18684
Sudo through 1.8.29 allows local users to escalate to root if they have write access to file descriptor 3 of the sudo process. This occurs because of a race condition between determining a uid, and the setresuid and openat system calls. The attacker can write "ALL ALL=ALL NOPASSWD:ALL" to...
CVE-2019-18683
CVE-2019-18683 affects the Linux kernel’s V4L2 vivid driver (drivers/media/platform/vivid). The issue arises from wrong mutex locking in functions vivid_stop_generating_vid_cap(), vivid_stop_generating_vid_out(), sdr_cap_stop_streaming(), and related kthreads, causing multiple race conditions dur...
Avast Free Antivirus < 19.1.2360 Information Disclosure Vulnerability - Windows
Avast Free Antivirus is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
CVE-2013-2012
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custominstall directory in the current working directory...
Directory traversal
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custominstall directory in the current working directory...
CVE-2013-2012
autojump before 21.5.8 allows local users to gain privileges via a Trojan horse custominstall directory in the current working directory...
Design/Logic Flaw
drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...
CVE-2010-0747
drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...
CVE-2010-0747: Incorrect Permission Assignment for Critical Resource
drbd8 allows local users to bypass intended restrictions for certain actions via netlink packets, similar to CVE-2009-3725...