7973 matches found
[SECURITY] [DSA 4377-1] rssh security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4377-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 30, 2019 https://www.debian.org/security/faq -...
The vulnerability of the reposync function of the YUM package manager, which allows a hacker to create, modify, or delete any files they desire.
The vulnerability of the reposync function in the YUM package manager exists due to insufficient restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to create, modify, or delete any files as desired from a remote location...
About the security content of watchOS 5.1.3
About the security content of watchOS 5.1.3 This document describes the security content of watchOS 5.1.3. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...
OpenSC CVE-2019-6502 Memory Leak Denial of Service Vulnerability
Description OpenSC is prone to a denial-of-service vulnerability. An attacker can exploit this issue to cause denial-of-service conditions. OpenSC version 0.19.0 is vulnerable; other versions may also be affected. Technologies Affected Opensc-Project Opensc 0.19.0 Recommendations Permit local...
The vulnerability of the IIoT Monitor platform, related to the lack of special character filtering, allows attackers to access areas beyond the restricted catalog.
The vulnerability of the IIoT Monitor platform lies in the lack of filtering for specific symbols. Exploiting this vulnerability could allow a malicious actor to access data beyond the limited access scope of the catalog...
CVE-2019-2544
Vulnerability in the Oracle Solaris component of Oracle Sun Systems Products Suite subcomponent: Kernel. Supported versions that are affected are 10 and 11. Easily exploitable vulnerability allows unauthenticated attacker with logon to the infrastructure where Oracle Solaris executes to compromis...
Authorization Bypass In The InvokeNextValue Function
The invokeNextValve function in identity/federation/bindings/tomcat/idp/AbstractIDPValve.java in PicketLink before 2.8.0.Beta1 does not properly check role based authorization, which allows remote authenticated users to gain access to restricted application resources via a 1 direct request or 2...
New Relic: GET request to accounts.json on support site leaks the root account license key and the browser license key to a restricted user
Overview As a restricted user, you cannot view the main account license key. If you are logged into your restricted user account, and visit https://support.newrelic.com/, when you attempt to create a ticket the root account license key will be exposed in the request. Steps to Reproduce 1. From a...
SAP Landscape Management Information Disclosure Vulnerability (CNVD-2019-04859)
SAP Landscape Management is a suite of business process solutions from SAP in Germany. The product is mainly used for the management of hybrid SAP environments. An information disclosure vulnerability exists in SAP Landscape Management, which can be exploited by remote attackers to access...
Microsoft .NET Framework and .NET Core Information Disclosure Vulnerability
NET Framework and .NET Core are both products of Microsoft Corporation.Microsoft .NET Framework is a comprehensive and consistent programming model and development platform for building applications for Windows, Windows Store, Windows Server, and Microsoft Azure. NET Framework is a comprehensive...
Linux: Restricted core dumps
Core dumps are the memory of a process when it crashes. Core dumps can grow to significant size, ending in a Denial of Service. Also, core dumps can be used to get confidential information from a core file. Note: This scripts looks for SPDX-FileCopyrightText: 2019 Greenbone AG Some text...
CVE-2019-0249
Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...
Authentication flaw
Under certain conditions SAP Landscape Management VCM 3.0 allows an attacker to access information which would otherwise be restricted...
CVE-2019-0248
Under certain conditions SAP Gateway of ABAP Application Server fixed in SAPGWFND 7.5, 7.51, 7.52, 7.53; SAPBASIS 7.5 allows an attacker to access information which would otherwise be restricted...
Microsoft Windows Kernel CVE-2019-0549 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Microsoft Windows Kernel CVE-2019-0536 Local Information Disclosure Vulnerability
Description Microsoft Windows is prone to a local information-disclosure vulnerability. Local attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Technologies Affected Microsoft Windows 10 Version 1607 for 32-bit Systems Microsoft Windows 10 Version...
Google Android Kernel Components Multiple Security Vulnerabilities
Description Google Android is prone to the following security vulnerabilities: 1. Multiple privilege-escalation vulnerabilities 2. A information-disclosure vulnerability Attackers can exploit these issues to gain elevated privileges and gain sensitive information. These issues are being tracked...
CVE-2018-7835
An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user...
Contao Unauthorized Access Vulnerability
Contao is an open source content management system CMS developed using PHP. The system supports search engine , rights management and CSS framework . An unauthorized access vulnerability exists in Contao, which can be exploited by an attacker to view records that are not open to the attacker...
NetChat v7.8 - Persistent Cross Site Scripting Vulnerability
Document Title: =============== NetChat v7.8 - Persistent Cross Site Scripting Vulnerability References: =========== https://www.vulnerability-lab.com/getcontent.php?id=2174 Watch Video: https://www.youtube.com/watch?v=2u-DHd5zlQw Advisory: https://www.vulnerability-lab.com/getcontent.php?id=2171...