Lucene search
K

12 matches found

Vulnrichment
Vulnrichment
added 2026/01/19 7:5 p.m.3 views

CVE-2025-69198 Pterodactyl's improper resource locking allows raced queries to create more resources than alloted

Pterodactyl is a free, open-source game server management panel. Pterodactyl implements rate limits that are applied to the total number of resources e.g. databases, port allocations, or backups that can exist for an individual server. These resource limits are applied on a per-server basis, and...

6CVSS5.6AI score0.00063EPSS
Exploits0References2
Veracode
Veracode
added 2023/02/25 8:47 p.m.33 views

Privilege Escalation

haproxy, buster is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order for an attacker...

9.1CVSS8.7AI score0.17535EPSS
Exploits0References10Affected Software4
Veracode
Veracode
added 2023/02/25 8:46 p.m.31 views

Privilege Escalation

firefox is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order for an attacker to...

6.5CVSS7.9AI score0.00201EPSS
Exploits0References5Affected Software5
Veracode
Veracode
added 2023/02/25 8:46 p.m.28 views

Privilege Escalation

firefox is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order for an attacker to...

8.8CVSS8AI score0.00124EPSS
Exploits0References5Affected Software5
Veracode
Veracode
added 2023/02/12 2:41 p.m.25 views

Privilege Escalation

github.com/pterodactyl/wings is vulnerable to Privilege Escalation. An attacker is able to change their resource allocations, promote containers to privileged mode, or potentially add ssh authorized keys to a remote shell on the target machine by creating new files on the host system. In order fo...

8.8CVSS8.2AI score0.00809EPSS
Exploits0References3Affected Software1
Prion
Prion
added 2023/02/08 7:15 p.m.18 views

Design/Logic Flaw

Wings is Pterodactyl's server control plane. Affected versions are subject to a vulnerability which can be used to create new files and directory structures on the host system that previously did not exist, potentially allowing attackers to change their resource allocations, promote their...

6.5CVSS8.4AI score0.00809EPSS
Exploits0References2Affected Software1
Github Security Blog
Github Security Blog
added 2023/02/08 6:19 p.m.80 views

Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following

Impact This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can be used to create new files and on the host system that previously did not exist, potentially allowing attackers to change their resource allocations, promote their containers to privileged mode...

8.8CVSS8.1AI score0.00809EPSS
Exploits0References6Affected Software1
OSV
OSV
added 2023/02/08 6:19 p.m.35 views

GHSA-P8R3-83R8-JWJ5 Pterodactyl Wings contains UNIX Symbolic Link (Symlink) Following

Impact This vulnerability impacts anyone running the affected versions of Wings. The vulnerability can be used to create new files and on the host system that previously did not exist, potentially allowing attackers to change their resource allocations, promote their containers to privileged mode...

8.4CVSS8.2AI score0.00809EPSS
Exploits0References6
Virtuozzo
Virtuozzo
added 2020/07/23 12:0 a.m.29 views

Product release: Virtuozzo Hybrid Infrastructure 3.5 Update 5 (3.5.5-26)

This update provides a new feature as well as improvements and bug fixes. Vulnerability id: VSTOR-34750 After failed VM evacuations, resource allocations are duplicated. Vulnerability id: VSTOR-30767 An update to a new major release may fail with the error "Updates to multiple product versions ar...

1.8AI score
Exploits0
OSV
OSV
added 2017/12/05 6:29 p.m.18 views

CVE-2017-17051

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

8.6CVSS6.5AI score
Exploits0References5
UbuntuCve
UbuntuCve
added 2017/12/05 12:0 a.m.27 views

CVE-2017-17051

An issue was discovered in the default FilterScheduler in OpenStack Nova 16.0.3. By repeatedly rebuilding an instance with new images, an authenticated user may consume untracked resources on a hypervisor host leading to a denial of service, aka doubled resource allocations. This regression was...

8.6CVSS7.2AI score0.00841EPSS
Exploits0References3
OpenVAS
OpenVAS
added 2009/12/14 12:0 a.m.17 views

Microsoft Office Project Remote Code Execution Vulnerability (967183)

This host is missing a critical security update according to Microsoft Bulletin MS09-074. OpenVAS Vulnerability Test $Id: secpodms09-074.nasl 5363 2017-02-20 13:07:22Z cfi $ Microsoft Office Project Remote Code Execution Vulnerability 967183 Authors: Antu Sanadi Copyright: Copyright c 2009 SecPod...

9.3CVSS0.5AI score0.47216EPSS
Exploits1References5
Rows per page
Query Builder