7973 matches found
Microsoft Windows SymCrypt CVE-2019-1171 Information Disclosure Vulnerability
Description Microsoft Windows is prone to an information-disclosure vulnerability. Attackers can exploit this issue to obtain sensitive information that may aid in launching further attacks. Technologies Affected Microsoft Windows 10 Version 1709 for ARM64-based Systems Microsoft Windows 10 Versi...
Microsoft Windows CVE-2019-1186 Local Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability. An attacker can exploit this issue to execute arbitrary code with elevated privileges. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version 1607 for x64-based...
ghostscript: -dSAFER escape via .buildfont1 (701394)
It was found that the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas...
ghostscript: -dSAFER escape via .buildfont1 (701394)
It was found that the .buildfont1 procedure did not properly secure its privileged calls, enabling scripts to bypass -dSAFER restrictions. An attacker could abuse this flaw by creating a specially crafted PostScript file that could escalate privileges and access files outside of restricted areas...
CVE-2019-1972
A vulnerability the Cisco Enterprise NFV Infrastructure Software NFVIS restricted CLI could allow an authenticated, local attacker with valid administrator-level credentials to elevate privileges and execute arbitrary commands on the underlying operating system as root. The vulnerability is due t...
kubectl path traversal vulnerability (CNVD-2019-26372)
kubectl is a command line program for running commands against a Kubernetes cluster. A path traversal vulnerability exists in kubectl. The vulnerability stems from a failure of a networked system or product to properly filter for special elements in a resource or file path. An attacker could use...
cPanel path traversal vulnerability (CNVD-2019-30467)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a failure of a network...
MicroDigital N-series cameras path traversal vulnerability
MicroDigital N-series cameras is an N-series network camera from MicroDigital Korea. A path traversal vulnerability exists in MicroDigital N-series cameras. An attacker could use this vulnerability to access locations outside of a restricted directory...
cPanel path traversal vulnerability (CNVD-2019-30468)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions prior to cPanel 62.0.4. The vulnerability stems from a failure of a network...
cPanel Access Control Error Vulnerability (CNVD-2019-29607)
cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in versions of cPanel prior to 68.0.15. An attacker can exploit the vulnerability to...
Unspecified vulnerability in cPanel (CNVD-2019-27422)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 62.0.17. An attacker can exploit the vulnerability to access restrict...
cPanel path traversal vulnerability (CNVD-2019-30469)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions prior to cPanel 67.9999.103. The vulnerability stems from a failure of a networ...
cPanel path traversal vulnerability (CNVD-2019-30466)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a failure of a network...
cPanel path traversal vulnerability (CNVD-2019-26341)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 64.0.21. The vulnerability stems from a failure of a network...
cPanel Path Traversal Vulnerability
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in cPanel versions prior to 62.0.17. The vulnerability stems from a failure of a network...
Magento Path Traversal Vulnerability
Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A path traversal vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2, and 2.3.2 before...
cPanel Path Traversal Vulnerability
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 64.0.21. The vulnerability stems from a failure of a network...
USN-4058-2: Bash vulnerability
USN-4058-1 fixed a vulnerability in bash. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and...
USN-4058-2 bash vulnerability
USN-4058-1 fixed a vulnerability in bash. This update provides the corresponding update for Ubuntu 12.04 ESM and Ubuntu 14.04 ESM. Original advisory details: It was discovered that Bash incorrectly handled the restricted shell. An attacker could possibly use this issue to escape restrictions and...