ABRT Local Information Disclosure Vulnerability

ABRT is a set of automated bug reporting tools. ABRT suffers from a local information disclosure vulnerability. An attacker can exploit this vulnerability to obtain sensitive information...

Multiple Local Security Bypass Vulnerabilities in ABRT

ABRT is a set of automated bug reporting tools. ABRT suffers from multiple local security bypass vulnerabilities. A local attacker could use this vulnerability to bypass security restrictions and perform unauthorized operations...

abrt: Various race-conditions and symlink issues found in abrt

It was found that ABRT was vulnerable to multiple race condition and symbolic link flaws. A local attacker could use either of these flaws to potentially escalate their privileges on the system...

PT-2017-6533 · Red Hat +1 · Abrt +2

Name of the Vulnerable Software and Affected Versions: Automatic Bug Reporting Tool ABRT affected versions not specified Description: The issue concerns the event scripts in ABRT, which use world-readable permission on a copy of the sosreport file in problem directories. This allows local users t...

PT-2020-7832 · Abrt +2 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: A directory traversal issue in abrt-dbus within the Automatic Bug Reporting Tool ABRT allows local users to read, write to, or change ownership of arbitrary files. This can be achieved via...

PT-2017-6665

Name of the Vulnerable Software and Affected Versions Automatic Bug Reporting Tool ABRT affected versions not specified Description The issue allows local users to have an unspecified impact on arbitrary files via a symlink attack on various files and directories, including /var/tmp/abrt//maps,...

PT-2020-7834 · Abrt +2 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue concerns the abrt-action-install-debuginfo-to-abrt-cache help program in the Automatic Bug Reporting Tool ABRT, which fails to properly handle the process environment before invoking...

Moodle 'mod/quiz/report/statistics/statistics_question_table.php' cross-site scripting vulnerability

Moodle is a free, open-source e-learning software platform, also known as a course management system, learning management system or virtual learning environment. A cross-site scripting vulnerability exists in the Moodle 'mod/quiz/report/statistics/statisticsquestiontable.php' script. A remote...

geekli.st Open Redirect vulnerability

Open Bug Bounty ID: OBB-65420 Description| Value ---|--- Affected Website:| geekli.st Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| Open Redirect / CWE-601 CVSSv3 Score:| 3.4...

CVE-2015-2051

creationtimestamp| type| source ---|---|--- 2015-06-01 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/37171 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/dlinkhnapheaderexecnoauth.rb 2019-01-25 17:02:02+00:0...

agenciasinc.es XSS vulnerability

Open Bug Bounty ID: OBB-63259 Description| Value ---|--- Affected Website:| agenciasinc.es Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention Cheat She...

COSO Framework for Service Organizations and SOC Reporting (Part 3 of 3)

In part 1 of this series, we discussed the recent changes to the COSO framework and the overall impact that the updated framework has on service organizations that receive Service Organization Controls SOC reports...

Important: Red Hat Security Advisory: qemu-kvm-rhev security update

Updated qemu-kvm-rhev packages that fix one security issue are now available for Red Hat Enterprise Linux OpenStack Platform 4.0, Red Hat Enterprise Linux OpenStack Platform 5.0 for Red Hat Enterprise Linux 6 and 7, and Red Hat Enterprise Linux OpenStack Platform 6.0. Red Hat Product Security has...

[security bulletin] HPSBGN03329 rev.1 - HP SDN VAN Controller, Remote Denial of Service (DoS), Distributed Denial of Service (DDoS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Note: the current version of the following document is available here: https://h20564.www2.hp.com/portal/site/hpsc/public/kb/ docDisplay?docId=emrna-c04657823 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c04657823 Version: 1 HPSBGN03329 rev....

Code injection

The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors...

CVE-2015-1907: Exposure of Sensitive Information to an Unauthorized Actor

The Administration and Reporting Tool in IBM Rational License Key Server RLKS 8.1.4 before 8.1.4.7 allows remote authenticated users to read cookies via unspecified vectors...

PT-2015-5497

Name of the Vulnerable Software and Affected Versions IBM Rational License Key Server RLKS versions 8.1.4 through 8.1.4.6 Description The issue in the Administration and Reporting Tool of IBM Rational License Key Server allows remote authenticated users to read cookies. Recommendations For versio...

Watcher v1.5.8 - Web Security Testing Tool and Passive Vulnerability Scanner

Watcher is a runtime passive-analysis tool for HTTP-based Web applications. Being passive means it won't damage production systems, it's completely safe to use in Cloud computing, shared hosting, and dedicated hosting environments. Watcher detects Web-application security issues as well as...

CVE-2015-1318

The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apport/apport file in a namespace container...

CVE-2015-1318

CVE-2015-1318 affects Ubuntu’s Apport crash-reporting feature (versions 2.13–2.17.x before 2.17.1). A local attacker could exploit the vulnerability by forwarding reports to a container and altering the root directory before loading crashes, causing usr/share/apport/apport in the crashed task’s d...