Lucene search
+L

3609 matches found

OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2018-1199)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.0194EPSS
SaveExploits6References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.30 views

Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2018-1274)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS9AI score0.0194EPSS
SaveExploits6References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.27 views

Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2018-1326)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.08171EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.23 views

Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2018-1230)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.1AI score0.08171EPSS
SaveExploits7References2
OpenVAS
OpenVAS
added 2020/01/23 12:00 a.m.32 views

Huawei EulerOS: Security Advisory for procps-ng (EulerOS-SA-2018-1340)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS8.8AI score0.08171EPSS
SaveExploits9References2
NVD
NVD
added 2020/01/21 6:15 p.m.28 views

CVE-2020-5202

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket...

5.5CVSS5.3AI score0.00465EPSS
SaveExploits1References5
OSV
OSV
added 2020/01/21 6:15 p.m.3 views

DEBIAN-CVE-2020-5202

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket...

5.5CVSS5.6AI score0.00465EPSS
SaveExploits1References1
OSV
OSV
added 2020/01/21 6:15 p.m.13 views

CVE-2020-5202

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket...

5.5CVSS5.2AI score
SaveExploits0References5
Prion
Prion
added 2020/01/21 6:15 p.m.19 views

Information disclosure

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket...

2.1CVSS5AI score0.00465EPSS
SaveExploits1References5Affected Software4
UbuntuCve
UbuntuCve
added 2020/01/21 6:15 p.m.24 views

CVE-2020-5202

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket...

5.5CVSS6.1AI score0.00465EPSS
SaveExploits1References2
Debian CVE
Debian CVE
added 2020/01/21 5:54 p.m.40 views

CVE-2020-5202

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket...

5.5CVSS5.6AI score0.00465EPSS
SaveExploits1
Cvelist
Cvelist
added 2020/01/21 5:54 p.m.33 views

CVE-2020-5202

apt-cacher-ng through 3.3 allows local users to obtain sensitive information by hijacking the hardcoded TCP port. The /usr/lib/apt-cacher-ng/acngtool program attempts to connect to apt-cacher-ng via TCP on localhost port 3142, even if the explicit SocketPath=/var/run/apt-cacher-ng/socket...

5.2AI score0.00465EPSS
SaveExploits1References5
CVE
CVE
added 2020/01/21 5:54 p.m.163 views

CVE-2020-5202

CVE-2020-5202 affects apt-cacher-ng (

5.5CVSS5AI score0.00465EPSS
SaveExploits1References5Affected Software1
OSV
OSV
added 2020/01/09 4:15 p.m.8 views

CVE-2019-20224

netflowgetstats in functionsnetflow.php in Pandora FMS 7.0NG allows remote authenticated users to execute arbitrary OS commands via shell metacharacters in the ipsrc parameter in an index.php?operation/netflow/nfliveview request. This issue has been fixed in Pandora FMS 7.0 NG 742...

8.8CVSS6AI score0.4968EPSS
SaveExploits5References5
Tenable Nessus
Tenable Nessus
added 2019/12/31 12:00 a.m.34 views

NewStart CGSL CORE 5.05 / MAIN 5.05 : procps-ng Vulnerability (NS-SA-2019-0252)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has procps-ng packages installed that are affected by a vulnerability: - procps-ng before version 3.3.15 is vulnerable to a local privilege escalation in top. If a user runs top with HOME unset in an attacker-controlled...

7.3CVSS7.6AI score0.01208EPSS
SaveExploits5References2
BDU FSTEC
BDU FSTEC
added 2019/12/22 12:00 a.m.13 views

The vulnerability of Junos OS routers from the NFX150, EX9200 series, with NG-RE, MX with NG-RE, PTX with NG-RE, and QFX10K with NG-RE families, arises due to incorrect restrictions on path names to restricted access directories. This allows attackers to gain unauthorized access to protected information.

The vulnerability of Junos OS router models in the NFX150, EX9200 with NG-RE, MX with NG-RE, PTX with NG-RE, and QFX10K with NG-RE series is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access t...

5.5CVSS5.9AI score0.00355EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/12/17 12:00 a.m.11 views

The authentication system’s vulnerability for web applications related to incorrect authorization allows attackers to gain unauthorized access to information and compromise its integrity and accessibility.

The vulnerability of the authentication system for web applications provided by LemonLDAP::NG stems from improper authorization conditions. This occurs when the relay party using OIDC has weaker access control rules than the target RP, and there is no URI filtering. Exploiting this vulnerability...

9.8CVSS7.7AI score0.02197EPSS
SaveExploits0References3Affected Software2
Packet Storm
Packet Storm
added 2019/11/18 12:00 a.m.145 views

nipper-ng 0.11.10 Remote Buffer Overflow

Exploit Title: nipper-ng 0.11.10 - Remote Buffer Overflow PoC Date: 2019-10-20 Exploit Author: Guy Levin https://blog.vastart.dev Vendor Homepage: https://tools.kali.org/reporting-tools/nipper-ng Software Link: https://code.google.com/archive/p/nipper-ng/source/default/source Version: 0.11.10...

6.8CVSS0.9AI score0.13426EPSS
SaveExploits7
zdt
zdt
added 2019/11/18 12:00 a.m.110 views

nipper-ng 0.11.10 - Remote Buffer Overflow Exploit

Exploit Title: nipper-ng 0.11.10 - Remote Buffer Overflow PoC Exploit Author: Guy Levin https://blog.vastart.dev Vendor Homepage: https://tools.kali.org/reporting-tools/nipper-ng Software Link: https://code.google.com/archive/p/nipper-ng/source/default/source Version: 0.11.10 Tested on: Debian CV...

7.8CVSS0.3AI score0.13426EPSS
SaveExploits7
nodejs
nodejs
added 2019/11/14 9:21 p.m.21 views

Sandbox Breakout / Arbitrary Code Execution

Overview Versions of pitboss-ng prior to 2.0.0 are vulnerable to Sandbox Escape leading to Remote Code Execution. The package fails to restrict access to the main context through this.constructor.constructor . This may allow attackers to execute arbitrary code in the system. Evaluating the payloa...

8.1AI score
SaveExploits0Affected Software1
Rows per page
Query Builder