CVE-2019-4473

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984...

CVE-2019-4473

Multiple binaries in IBM SDK, Java Technology Edition 7, 7R, and 8 on the AIX platform use insecure absolute RPATHs, which may facilitate code injection and privilege elevation by local users. IBM X-Force ID: 163984. Recent assessments: timb-machine at March 05, 2021 12:23am UTC reported: Unlikel...

CVE-2018-20894

cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...

Design/Logic Flaw

cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...

CVE-2018-20873

cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...

Design/Logic Flaw

cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...

CVE-2018-20873

cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...

CVE-2018-20873: Improper Input Validation

cPanel before 74.0.8 allows local users to disable the ClamAV daemon SEC-409...

CVE-2018-20894: Exposure of Sensitive Information to an Unauthorized Actor

cPanel before 74.0.0 makes web-site contents accessible to other local users via Git repositories SEC-443...

CVE-2019-14400

CVE-2019-14400 affects cPanel prior to 78.0.18. The vulnerability arises from userdata cache misparsing (SEC-479) and allows a local attacker to escalate privileges to root. The impact is described as complete confidentiality, integrity, and availability compromise for the affected host. Remediat...

CVE-2019-14389

cPanel before 82.0.2 allows local users to discover the MySQL root password SEC-510...

CVE-2019-11771

AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

CVE-2019-11771

AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

Code injection

AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users...

CVE-2019-13272

In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a...

CVE-2019-13272

CVE-2019-13272 affects the Linux kernel ptrace code (kernel/ptrace.c), where credentials recording during ptrace relationship establishment can fail, enabling a local attacker to obtain root privileges under certain parent/child lifecycle scenarios and potentially cause a panic. Public advisories...

CVE-2019-13272

In the Linux kernel before 5.1.17, ptracelink in kernel/ptrace.c mishandles the recording of the credentials of a process that wants to create a ptrace relationship, which allows local users to obtain root access by leveraging certain scenarios with a parent-child process relationship, where a...

CVE-2019-11771

AIX builds of Eclipse OpenJ9 before 0.15.0 contain unused RPATHs which may facilitate code injection and privilege elevation by local users. Recent assessments: timb-machine at March 05, 2021 12:25am UTC reported: Unlikely to be setUID, unlikely that you will have write control over the vulnerabl...

PT-2019-12490 · Eclipse +2 · Eclipse Openj9 +2

Name of the Vulnerable Software and Affected Versions: Eclipse OpenJ9 versions prior to 0.15.0 Description: The issue concerns AIX builds of Eclipse OpenJ9, where unused RPATHs may facilitate code injection and privilege elevation by local users. This could allow a local attacker to gain elevated...

CVE-2019-13404

The MSI installer for Python through 2.7.16 on Windows defaults to the C:\Python27 directory, which makes it easier for local users to deploy Trojan horse code. This also affects old 3.x releases before 3.5. NOTE: the vendor's position is that it is the user's responsibility to ensure C:\Python27...