123 matches found
Broadcom SANnav 日志信息泄露漏洞
Broadcom SANnav is a suite of SAN management platforms from Broadcom USA. A log information disclosure vulnerability exists in Broadcom SANnav versions prior to 2.2.2, which stems from the printing of Fabric OS switch passwords and authorization IDs in an embedded MLS database file, which could...
CVE-2022-43935: Insertion of Sensitive Information into Log File
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file...
(Pwn2Own) Canon imageCLASS MF753Cdw rls-login Authorization Stack-based Buffer Overflow Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Canon imageCLASS MF753Cdw printers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the parsing of the Authorization header provided to the...
Google Messages Getting Cross-Platform End-to-End Encryption with MLS Protocol
Google has announced that it intends to add support for Message Layer Security MLS to its Messages service for Android and open source an implementation of the specification. "Most modern consumer messaging platforms including Google Messages support end-to-end encryption, but users today are...
CVE-2022-43935: Switch passwords and authorization IDs are printed in the embedded MLS DB file5
An information exposure through log file vulnerability exists in Brocade SANnav before Brocade SANnav 2.2.2, where Brocade Fabric OS Switch passwords and authorization IDs are printed in the embedded MLS DB file. Products Affected Brocade SANnav versions before v2.2.2 Products Confirmed Not...
Huawei EulerOS: Security Advisory for selinux-policy (EulerOS-SA-2022-2012)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
PT-2021-27970
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash type of UNKNOWN READ. The crash state includes functions such as mls semantic level expand, policydb user cache, and hashta...
PT-2021-27971
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description The issue is related to a crash, specifically a Segv on an unknown address. The crash state involves several functions, including symhash, hashtab search,...
selinux:binpolicy-fuzzer: Segv on unknown address in symhash
Project: https://github.com/SELinuxProject/selinux.git Detailed Report: https://oss-fuzz.com/testcase?key=6539673923616768 Project: selinux Fuzzing Engine: libFuzzer Fuzz Target: binpolicy-fuzzer Job Type: libfuzzerasanselinux Platform Id: linux Crash Type: Segv on unknown address Crash Address:...
CVE-2020-27056
CVE-2020-27056 affects Android 11 with a missing permission check in SELinux MLS policies that can disclose local package-metadata information without extra privileges. The issue is confirmed as a local information-disclosure vulnerability; no exploitation details are provided in the documents. R...
PT-2020-16632
Name of the Vulnerable Software and Affected Versions Android versions Android-11 Description In SELinux policies of mls, there is a missing permission check. This could lead to local information disclosure of package metadata with no additional execution privileges needed. User interaction is no...
Linux: Get crontab and /etc/cron.* scripts
Crontab is the program used to install, remove or list the tables used to drive the cron8 daemon. Each user can have their own crontab, and though these are files in /var/spool/, they are not intended to be edited directly. For SELinux in mls mode can be even more crontabs - for each range. Many ...
mls-navigator.com Cross Site Scripting vulnerability OBB-1309407
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
marylandhomesinmls.com Cross Site Scripting vulnerability OBB-1236998
Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has:       a. verified the vulnerability and confirmed its existence;       b. notified the website operator about its existence...
Code injection
The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...
CVE-2017-11119
The chkmemaccess function in cpu/nes6502/nes6502.c in libnosefart.a in Nosefart 2.9-mls allows remote attackers to cause a denial of service invalid memory read and application crash via a crafted nsf file...
CVE-2017-11119
Summary (CVE-2017-11119) : The vulnerability affects Nosefart 2.9-mls, in the chk_mem_access function of cpu/nes6502/nes6502.c within libnosefart.a. A crafted NSF file can cause a denial of service by triggering an invalid memory read and application crash. The linked (connected) documents consis...
oldmillprops.com XSS vulnerability
Open Bug Bounty ID: OBB-252559 Description| Value ---|--- Affected Website:| oldmillprops.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...
Red Hat Enterprise Linux Data Compromise
The vulnerability of the selinux-policy-mls-3.7.19 package of the Red Hat Enterprise Linux operating system can lead to violations of confidentiality, integrity, and accessibility of protected information. This vulnerability can be exploited locally...
Information disclosure
The Go MSX MLS aka com.doapps.android.realestate.RE16b9c09c4d5b0e174208f35e7c49f9a0 application 2.3.4.MR3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...