643 matches found
UBUNTU-CVE-2023-47480
An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the setid function...
CVE-2023-47480
CVE-2023-47480 affects Pure Data up to 0.54-0, with a local privilege-escalation through the set*id() family of calls; fixed in 0.54-1. Debian LTS DLA-3895-1 and related advisories note the fix in Debian 11 (puredata 0.51.4-1+deb11u1) and recommend upgrading. Other NASL/OpenVAS entries indicate u...
CVE-2023-47480
An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the setid function...
CVE-2023-47480
An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the setid function...
CVE-2023-47480
An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the setid function...
CVE-2023-47480
An issue in Pure Data 0.54-0 and fixed in 0.54-1 allows a local attacker to escalate privileges via the setid function...
PT-2024-13455 · Pure Data · Pure Data
Name of the Vulnerable Software and Affected Versions: Pure Data versions 0.54-0 Description: An issue in Pure Data allows a local attacker to escalate privileges via the setid function. This is a local privilege escalation issue that can be exploited by a local attacker to gain higher privileges...
Pure Data 安全漏洞
Pure Data is a free real-time computer music system open-sourced by Pure Data. A security vulnerability exists in Pure Data version 0.54-0, which stems from the ability to elevate privileges via the setid function...
PT-2024-8546 · Pure Ftpd +1 · Pure-Ftpd +1
Name of the Vulnerable Software and Affected Versions: Pure-FTPd versions prior to 1.0.52 Description: The issue is related to the domlsd function in the ls.c file of the Pure-FTPd FTP server, which is associated with an out of bounds read in memory. This can be exploited by a remote attacker to...
RHEL 9 : gvisor-tap-vsock (RHSA-2024:6187)
The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2024:6187 advisory. A replacement for libslirp and VPNKit, written in pure Go. It is based on the network stack of gVisor and is used to provide networking for...
GHSA-34QG-65M4-F23M Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>
Summary In Froxlor 2.1.9 and in the HEADs of the main, v2.2 and v2.1 branches , the XML templates in lib/configfiles/ set chmod 644 for /etc/pure-ftpd/db/mysql.conf, although that file contains . At least on Debian 12, all parent directories of /etc/pure-ftpd/db/mysql.conf are world readable by...
Froxlor: /etc/pure-ftpd/db/mysql.conf is chmod 644 but contains <SQL_UNPRIVILEGED_PASSWORD>
Summary In Froxlor 2.1.9 and in the HEADs of the main, v2.2 and v2.1 branches , the XML templates in lib/configfiles/ set chmod 644 for /etc/pure-ftpd/db/mysql.conf, although that file contains . At least on Debian 12, all parent directories of /etc/pure-ftpd/db/mysql.conf are world readable by...
PT-2024-40042 · Percona +2 · Percona +2
Name of the Vulnerable Software and Affected Versions: Froxlor versions 2.1.9 and earlier Description: The issue concerns the exposure of MySQL database credentials due to incorrect file permissions. In affected Froxlor instances configured to use pure-ftpd, the XML templates set chmod 644 for...
CVE-2024-3219 Pure-Python fallback of socket.socketpair() doesn’t authenticate peer connection
The “socket” module provides a pure-Python fallback to the socket.socketpair function for platforms that don’t support AFUNIX, such as Windows. This pure-Python implementation uses AFINET or AFINET6 to create a local connected pair of sockets. The connection between the two sockets was not verifi...
@appium/universal-xml-plugin (>=1.0.18 <=1.0.20), @cardscan.ai/cardscan-client (>=0.1.0 <=0.4.3) +105 more potentially affected by CVE-2024-41818 via fast-xml-parser (>=4.3.5 <=4.4.0)
fast-xml-parser NPM version =4.3.5, =1.0.18, =0.1.0, =1.1.0, =8.0.167, =11.49.0, =13.4.12, =11.49.0, =28.16.23, =11.49.0, =0.0.145, =1.0.0, =10.3.11, =0.1.11, =8.0.167, =5.0.167, =5.0.200 and more Source cves: CVE-2024-41818 Source advisory: OSV:GHSA-MPG4-RC92-VX8V...
OPENSUSE-SU-2024:10318-1 pure-ftpd-1.0.43-1.3 on GA media
These are all security issues fixed in the pure-ftpd-1.0.43-1.3 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11335-1 ruby2.7-rubygem-json_pure-2.5.1-1.4 on GA media
These are all security issues fixed in the ruby2.7-rubygem-jsonpure-2.5.1-1.4 package on the GA media of openSUSE Tumbleweed...
OPENSUSE-SU-2024:11773-1 pure-ftpd-1.0.50-1.1 on GA media
These are all security issues fixed in the pure-ftpd-1.0.50-1.1 package on the GA media of openSUSE Tumbleweed...
Pure Chat – Live Chat Plugin & More! < 2.23 - Cross-Site Request Forgery
Description The Pure Chat plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 2.22. This is due to missing or incorrect nonce validation on the purechatupdate function. This makes it possible for unauthenticated attackers to update chat details v...