60 matches found
CVE-2021-1072
NVIDIA GeForce Experience, all versions prior to 3.21, contains a vulnerability in GameStream rxdiag.dll where an arbitrary file deletion due to improper handling of log files may lead to denial of service...
NVIDIA GeForce Experience 安全漏洞
NVIDIA GeForce Experience is graphics card driver update software that helps to check your computer's geforce drivers and update them to the latest version. An arbitrary file deletion vulnerability exists in GameStream rxdiag.dll in NVIDIA GeForce Experience versions prior to 3.21. The...
Exploit for Improper Handling of Exceptional Conditions in Sudo_Project Sudo
PoC exploit for CVE-2019-14287, a vulnerability in Sudo before 1.8.28. The exploit targets the ability of an attacker with access to a Runas ALL sudoer account to bypass certain policy blacklists and session PAM modules, and cause incorrect logging, by invoking sudo with a crafted user ID. The...
Dnxfirewall - A Pure Python Next Generation Firewall Built On Top Of Linux Kernel/Netfilter
DNX Firewall is an optimized/high performance collection of applications or services to convert a standard linux system into a zone based next generation firewall. All software is designed to run in conjunction with eachother, but with a modular design certain aspects can be completely removed wi...
Directory traversal
FarLinX X25 Gateway through 2014-09-25 allows directory traversal via the log-handling feature...
CVE-2014-7174
CVE-2014-7174 affects FarLinX X25 Gateway; a directory traversal vulnerability exists in the log-handling feature, enabling access to restricted paths. Reported for versions up to 2014-09-25. CVE details show a network-accessible issue with medium overall impact (C/L, I/N, A/N per CVSSv2/v3.1). C...
AutoSQLi - An Automatic SQL Injection Tool Which Takes Advantage Of Googler, Ddgr, WhatWaf And SQLMap
An Automatic SQL Injection Tool Which Takes Advantage Of DorkNet Googler, Ddgr, WhatWaf And Sqlmap. Features Save System - there is a complete save system, which can resume even when your pc crashed. - technology is cool Dorking - from the command line one dork : YES - from a file: NO - from an...
mysql: insecure error log file handling in mysqld_safe, incomplete CVE-2016-6664 fix (CPU Jan 2017)
Multiple flaws were found in the way the mysqldsafe script handled creation of error log file. The mysql operating system user could use these flaws to escalate their privileges to root...
mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)
A flaw was found in the way the mysqldsafe script handled creation of error log file. The mysql operating system user could use this flaw to escalate their privileges to root...
mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)
A flaw was found in the way the mysqldsafe script handled creation of error log file. The mysql operating system user could use this flaw to escalate their privileges to root...
MGASA-2017-0054 Updated mariadb packages fix security vulnerability
Root Privilege Escalation CVE-2016-6664. Unspecified vulnerability affecting the Optimizer component CVE-2017-3238. Unspecified vulnerability affecting the Charsets component CVE-2017-3243. Unspecified vulnerability affecing the DML component CVE-2017-3244. Unspecified vulnerability affecting...
SUSE-SU-2017:0412-1 Security update for mariadb
This mariadb version update to 10.0.29 fixes the following issues: - CVE-2017-3318: unspecified vulnerability affecting Error Handling bsc1020896 - CVE-2017-3317: unspecified vulnerability affecting Logging bsc1020894 - CVE-2017-3312: insecure error log file handling in mysqldsafe, incomplete...
SUSE-SU-2017:0411-1 Security update for mariadb
This mariadb version update to 10.0.29 fixes the following issues: - CVE-2017-3318: unspecified vulnerability affecting Error Handling bsc1020896 - CVE-2017-3317: unspecified vulnerability affecting Logging bsc1020894 - CVE-2017-3312: insecure error log file handling in mysqldsafe, incomplete...
nagios: Privilege escalation issue
A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration the 'nagios' user/group could use this flaw to elevate their privileges to root...
nagios: Privilege escalation issue
A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration the 'nagios' user/group could use this flaw to elevate their privileges to root...
nagios: Privilege escalation issue
A privilege escalation flaw was found in the way Nagios handled log files. An attacker able to control the Nagios logging configuration the 'nagios' user/group could use this flaw to elevate their privileges to root...
mysql: insecure error log file handling in mysqld_safe (CPU Oct 2016)
A flaw was found in the way the mysqldsafe script handled creation of error log file. The mysql operating system user could use this flaw to escalate their privileges to root...
CVE-2016-6393
The AAA service in Cisco IOS 12.0 through 12.4 and 15.0 through 15.6 and IOS XE 2.1 through 3.18 and 16.2 allows remote attackers to cause a denial of service device reload via a failed SSH connection attempt that is mishandled during generation of an error-log message, aka Bug ID CSCuy87667...
[SECURITY] Fedora 15 Update: logrotate-3.7.9-8.fc15
The logrotate utility is designed to simplify the administration of log files on a system which generates a lot of log files. Logrotate allows for the automatic rotation compression, removal and mailing of log files. Logrotate can be set to handle a log file daily, weekly, monthly or when the log...
Liteserve Buffer Overflow in Handling Server's Log.
Liteserve Buffer Overflow in Handling Server's Log. ================================================= PROGRAM: Liteserve HOMEPAGE:http://www.cmfperception.com/liteserve.html VULNERABLE VERSIONS: 2.2 and below DESCRIPTION ================================================= LiteServe is a powerful,...