8386 matches found
PT-2020-7832 · Abrt +2 · Abrt +2
Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: A directory traversal issue in abrt-dbus within the Automatic Bug Reporting Tool ABRT allows local users to read, write to, or change ownership of arbitrary files. This can be achieved via...
PT-2020-7834 · Abrt +2 · Abrt +2
Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue concerns the abrt-action-install-debuginfo-to-abrt-cache help program in the Automatic Bug Reporting Tool ABRT, which fails to properly handle the process environment before invoking...
Moodle 'mod/quiz/report/statistics/statistics_question_table.php' cross-site scripting vulnerability
Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in the Moodle 'mod/quiz/report/statistics/statisticsquestiontable.php' script. A remote...
geekli.st Open Redirect vulnerability
Open Bug Bounty ID: OBB-65420 Description| Value ---|--- Affected Website:| geekli.st Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...
CVE-2015-2051
creationtimestamp| type| source ---|---|--- 2015-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37171 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkhnapheaderexecnoauth.rb 2019-01-25 17:02:02+00:0...
agenciasinc.es XSS vulnerability
Open Bug Bounty ID: OBB-63259 Description| Value ---|--- Affected Website:| agenciasinc.es Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...
COSO Framework for Service Organizations and SOC Reporting (Part 3 of 3)
In part 1 of this series, we discussed the recent changes to the COSO framework and the overall impact that the updated framework has on service organizations that receive Service Organization Controls SOC reports...
Important: Red Hat Security Advisory: qemu-kvm-rhev security update
Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0, Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6 and 7, and Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has...
[security bulletin] HPSBGN03329 rev.1 - HP SDN VAN Controller, Remote Denial of Service (DoS), Distributed Denial of Service (DDoS)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04657823 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04657823 Version: 1 HPSBGN03329 rev....
Code injection
The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors...
PT-2015-5497
Name of the Vulnerable Software and Affected Versions IBM Rational License Key Server RLKS versions 8.1.4 through 8.1.4.6 Description The issue in the Administration and Reporting Tool of IBM Rational License Key Server allows remote authenticated users to read cookies. Recommendations For versio...
CVE-2015-1907: Exposure of Sensitive Information to an Unauthorized Actor
The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors...
Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner
Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...
CVE-2015-1318
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace container...
CVE-2015-1318
CVE-2015-1318 affects Ubuntu’s Apport crash-reporting feature (versions 2.13–2.17.x before 2.17.1). A local attacker could exploit the vulnerability by forwarding reports to a container and altering the root directory before loading crashes, causing usr/share/apport/apport in the crashed task’s d...
Unspecified Vulnerability in Oracle Hyperion BI+
Oracle Hyperion BI+ is a business intelligence program. A security vulnerability exists in Oracle Hyperion BI+. It allows attackers to exploit this vulnerability to compromise the 'Reporting and Analysis' subcomponent over the HTTP protocol...
Fedora abrt competitive conditions vulnerability
Fedora is an open, innovative and forward-thinking operating system and platform based on Linux.ABRT is an automated bug detection and reporting tool. A competitive condition vulnerability exists in Fedora abrt. An attacker can exploit this vulnerability to gain privileges...
Apport/Abrt Local Privilege Vulnerability
Apport is the crash report service on ubuntu, that is, when a program crashes the pop-up program that sends an error report. ABRT is an automated bug detection and reporting tool. Apport/Abrt is vulnerable to a local privilege exploit. An attacker can exploit the vulnerability to gain root...
CVE-2015-1318: Undefined Security Weakness
The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace container...
CVE-2015-0509
Unspecified vulnerability in the Oracle Hyperion BI+ component in Oracle Hyperion 11.1.2.2 and 11.1.2.3 allows remote attackers to affect integrity via unknown vectors related to Reporting and Analysis...