PT-2015-3577

Name of the Vulnerable Software and Affected Versions GE Healthcare Centricity DMS version 4.2 Description The Ad Hoc Reporting feature in GE Healthcare Centricity DMS has a password of Never!Mind for the Administrator user. The impact and attack vectors of this issue are unspecified...

CVE-2013-7405: Undefined Security Weakness

The Ad Hoc Reporting feature in GE Healthcare Centricity DMS 4.2 has a password of Never!Mind for the Administrator user, which has unspecified impact and attack vectors. NOTE: it is not clear whether this password is default, hardcoded, or dependent on another system or product that requires a...

[SECURITY] Fedora 22 Update: haproxy-1.5.14-1.fc22

HAProxy is a TCP/HTTP reverse proxy which is particularly suited for high availability environments. Indeed, it can: - route HTTP requests depending on statically assigned cookies - spread load among several servers while assuring server persistence through the use of HTTP cookies - switch to...

Oracle Critical Patch Update Advisory - July 2015

A Critical Patch Update CPU is a collection of patches for multiple security vulnerabilities. Critical Patch Update patches are usually cumulative, but each advisory describes only the security fixes added since the previous Critical Patch Update advisory. Thus, prior Critical Patch Update...

abrt: Various race-conditions and symlink issues found in abrt

It was found that ABRT was vulnerable to multiple race condition and symbolic link flaws. A local attacker could use either of these flaws to potentially escalate their privileges on the system...

CVE-2015-2742

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream...

CVE-2015-2742

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream...

Information disclosure

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream...

CVE-2015-2742: Exposure of Sensitive Information to an Unauthorized Actor

Mozilla Firefox before 39.0 on OS X includes native key press information during the logging of crashes, which allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream...

PT-2015-5863

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 39.0 Description The issue allows remote attackers to obtain sensitive information by leveraging access to a crash-reporting data stream, as native key press information is included during the logging of...

[SECURITY] Fedora 21 Update: libreport-2.3.0-8.fc21

Libraries providing API for reporting different problems in applications to different bug targets like Bugzilla, ftp, trac, etc...

ABRT Local Information Disclosure Vulnerability

ABRT is a set of automated bug reporting tools. ABRT suffers from a local information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Multiple Local Elevation of Privilege Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple local elevation of privilege vulnerabilities. A local attacker can exploit this vulnerability to gain elevated privileges...

ABRT Local Elevation of Privilege Vulnerability

ABRT is a set of automated bug reporting tools. ABRT suffers from a local boost elevation vulnerability. A local attacker can exploit this vulnerability to gain root privileges...

Multiple Local Information Disclosure Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT has multiple local information disclosure vulnerabilities. A local attacker could exploit the vulnerabilities to obtain sensitive information...

Multiple Local Security Bypass Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple local security bypass vulnerabilities. A local attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

Multiple Directory Traversal Vulnerability in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple directory traversal vulnerabilities. A local attacker can exploit this vulnerability by sending a request with the directory traversal character '...' with the directory traversal character '...'...

abrt: Various race-conditions and symlink issues found in abrt

It was found that ABRT was vulnerable to multiple race condition and symbolic link flaws. A local attacker could use either of these flaws to potentially escalate their privileges on the system...

PT-2017-6665

Name of the Vulnerable Software and Affected Versions Automatic Bug Reporting Tool ABRT affected versions not specified Description The issue allows local users to have an unspecified impact on arbitrary files via a symlink attack on various files and directories, including /var/tmp/abrt//maps,...

PT-2020-7832 · Abrt +2 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: A directory traversal issue in abrt-dbus within the Automatic Bug Reporting Tool ABRT allows local users to read, write to, or change ownership of arbitrary files. This can be achieved via...