Lucene search
+L

370 matches found

hackapp
hackapp
added 2017/06/21 11:10 a.m.18 views

Mock GPS with joystick - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mock GPS with joystick published at the 'play' market has multiple vulnerabilities...

0.5AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/06/05 12:0 a.m.10 views

The vulnerability of the SCM plugin for distribution of package builds in the mock operating system Fedora allows a hacker to gain superuser privileges.

The vulnerability of the SCM-plugin in the distribution of package-building tools for the mock operating system Fedora is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass the root protection mechanisms and gain superuser privileges by usi...

9.3CVSS7.1AI score0.01729EPSS
Exploits1References7Affected Software1
NVD
NVD
added 2017/04/14 6:59 p.m.14 views

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

9.3CVSS7.5AI score0.01729EPSS
Exploits1References6
Prion
Prion
added 2017/04/14 6:59 p.m.20 views

Design/Logic Flaw

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

9.3CVSS7AI score0.01729EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2017/04/14 6:59 p.m.5 views

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

7.8CVSS5.8AI score0.01729EPSS
Exploits1References6
UbuntuCve
UbuntuCve
added 2017/04/14 6:59 p.m.29 views

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

9.3CVSS7.1AI score0.01729EPSS
Exploits1References3
OSV
OSV
added 2017/04/14 6:59 p.m.5 views

UBUNTU-CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

7.8CVSS7.1AI score0.01729EPSS
Exploits1References4
CVE
CVE
added 2017/04/14 6:0 p.m.57 views

CVE-2016-6299

CVE-2016-6299 affects the scm plug-in in mock, where crafted spec files can bypass the chroot protection and grant the attacker root privileges. This is a local-type vulnerability with high impact (C/H/I/A) per CVSS. Fedora advisories indicate a security fix was released for this CVE; other sourc...

9.3CVSS7.3AI score0.01729EPSS
Exploits1References6Affected Software1
Cvelist
Cvelist
added 2017/04/14 6:0 p.m.33 views

CVE-2016-6299

The scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file...

7.4AI score0.01729EPSS
Exploits1References6
Positive Technologies
Positive Technologies
added 2017/04/14 12:0 a.m.5 views

PT-2017-2109 · Mock · Mock

Name of the Vulnerable Software and Affected Versions: mock affected versions not specified Description: The issue is related to the scm plug-in in mock, which may allow attackers to bypass the intended chroot protection mechanism and gain root privileges via a crafted spec file. This is due to...

9.3CVSS7.3AI score0.01729EPSS
Exploits1References15
hackapp
hackapp
added 2017/01/18 7:26 p.m.21 views

Mock Locations (fake GPS path) - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application Mock Locations fake GPS path published at the 'play' market has multiple vulnerabilities...

7.2AI score
Exploits0References1Affected Software1
OpenVAS
OpenVAS
added 2016/12/07 12:0 a.m.22 views

Fedora Update for mock FEDORA-2016-34e61fa48d

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.01729EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2016/11/15 12:0 a.m.26 views

Fedora 25 : distribution-gpg-keys / mock (2016-34e61fa48d)

Security fix for CVE-2016-6299 - Additionally GPG key for Mageia has been renamed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

9.3CVSS7.1AI score0.01729EPSS
Exploits1References2
Oracle linux
Oracle linux
added 2016/11/09 12:0 a.m.29 views

krb5 security, bug fix, and enhancement update

1.14.1-26 - Use responder in non-preauth AS reqs - Resolves: 1363690 1.14.1-25 - Fix bad debuglog call in selinux handling - Resolves: 1292153 1.14.1-24 - Fix KKDCPP with TLS SNI by always presenting 'Host:' header - Resolves: 1364993 1.14.1-23 - Add dependency on libkadm5 to krb5-devel - Resolve...

6.5CVSS0.1AI score0.39969EPSS
Exploits0
OpenVAS
OpenVAS
added 2016/09/24 12:0 a.m.24 views

Fedora Update for mock FEDORA-2016-5a12527790

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.3CVSS7.6AI score0.01729EPSS
Exploits1References2
Fedora
Fedora
added 2016/09/23 3:23 a.m.67 views

[SECURITY] Fedora 23 Update: mock-1.2.21-1.fc23

Mock takes an SRPM and builds it in a chroot...

9.3CVSS2AI score0.01729EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2016/09/23 12:0 a.m.25 views

Fedora 23 : distribution-gpg-keys / mock (2016-5a12527790)

Security fix for CVE-2016-6299 - Additionally GPG key for Mageia has been renamed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

9.3CVSS7.1AI score0.01729EPSS
Exploits1References2
Fedora
Fedora
added 2016/09/20 5:17 p.m.28 views

[SECURITY] Fedora 25 Update: mock-1.2.21-1.fc25

Mock takes an SRPM and builds it in a chroot...

9.3CVSS2AI score0.01729EPSS
Exploits1
Tenable Nessus
Tenable Nessus
added 2016/09/19 12:0 a.m.26 views

Fedora 24 : distribution-gpg-keys / mock (2016-145afea99e)

Security fix for CVE-2016-6299 - Additionally GPG key for Mageia has been renamed Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without...

9.3CVSS7.1AI score0.01729EPSS
Exploits1References2
CNVD
CNVD
added 2016/09/18 12:0 a.m.6 views

Mock Local Elevation of Privilege Vulnerability

The mock is a test method that creates a virtual object for some objects that are not easy to construct or obtain for testing purposes. A local elevation of privilege vulnerability exists in mock. A local attacker can exploit the vulnerability to gain higher privileges...

9.3CVSS7.2AI score0.01729EPSS
Exploits1References1
Rows per page
Query Builder