3849 matches found
ALPINE-CVE-2017-18018
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...
UBUNTU-CVE-2017-18018
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...
CVE-2017-18018
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...
DEBIAN-CVE-2017-18018
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...
CVE-2017-18018
In GNU Coreutils through 8.29, chown-core.c in chown and chgrp does not prevent replacement of a plain file with a symlink during use of the POSIX "-R -L" options, which allows local users to modify the ownership of arbitrary files by leveraging a race condition...
CVE-2017-9966
A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...
CVE-2017-9966: Undefined Security Weakness
A privilege escalation vulnerability exists in Schneider Electric's Pelco VideoXpert Enterprise versions 2.0 and prior. By replacing certain files, an unauthorized user can obtain system privileges and the inserted code would execute at an elevated privilege level...
Schneider Electric Pelco VideoXpert Enterprise Elevation of Privilege Vulnerability
Pelco VideoXpert Enterprise is an enterprise video management system. An elevation of privilege vulnerability exists in Schneider Electric Pelco VideoXpert Enterprise, where an attacker can gain system privileges by replacing certain files and inserting code that will execute with the elevated...
Omnibox Google Chrome Domain Replacement
The vulnerability of the Omnibox browser implementation by Google Chrome is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a domain name using a specially crafted domain name that includes IDN Internationalized Domain Names...
Omnibox Google Chrome Domain Replacement
The vulnerability in the Omnibox implementation of the Google Chrome browser exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to replace a domain name using a specially crafted domain name that includes RTL right-to-left symbols...
Lessons Learned from the Estonian National ID Security Flaw
Estonia recently suffered a major flaw in the security of their national ID card. This article discusses the fix and the lessons learned from the incident: In the future, the infrastructure dependency on one digital identity platform must be decreased, the use of several alternatives must be...
[SECURITY] Fedora 26 Update: exim-4.89-7.fc26
Exim is a message transfer agent MTA developed at the University of Cambridge for use on Unix systems connected to the Internet. It is freely available under the terms of the GNU General Public Licence. In style it is similar to Smail 3, but its facilities are more general. There is a great deal ...
Description of the security update for Office 2013: December 12, 2017
Description of the security update for Office 2013: December 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
Description of the security update for Word 2010: December 12, 2017
Description of the security update for Word 2010: December 12, 2017 Summary This security update resolves vulnerabilities in Microsoft Office that could allow remote code execution if a user opens a specially crafted Office file. To learn more about these vulnerabilities, see Microsoft Common...
thunderbird security update
52.5.0-1.0.1 - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js 52.5.0-1 - Update to 52.5.0...
Machine Learning Image Steganalysis: Aletheia
Aletheia is a steganalysis tool for the detection of hidden messages in images. The goal of steganalysis is to identify suspected packages, determine whether or not they have a payload encoded into them, and, if possible, recover that payload. Unlike cryptanalysis, steganalysis generally starts...
CVE-2017-1001003
CVE-2017-1001003 affects math.js prior to 3.17.0. The issue allows private properties (e.g., a constructor) to be replaced by using Unicode characters when creating an object, which can alter object behavior. Documents reference upgrades to 3.17.0+ as the advised remediation and indicate the vuln...
CVE-2017-1001003: Improper Neutralization of Argument Delimiters in a Command
math.js before 3.17.0 had an issue where private properties such as a constructor could be replaced by using unicode characters when creating an object...
Directory traversal
Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service...
CVE-2017-2706
Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service...