4664 matches found
container uid changes to root after first restart or if image is already pulled to the node
CVSS:3.0/AV:L/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L, 4.9 medium In kubelet v1.13.6 and v1.14.2, containers for pods that do not specify an explicit runAsUser attempt to run as uid 0 root on container restart, or if the image was previously pulled to the node. If the pod specified mustRunAsNonRoot: true,...
Microsoft SQL Server CVE-2019-0819 Information Disclosure Vulnerability
Description Microsoft SQL Server is prone to an information-disclosure vulnerability. An attacker can leverage this issue to obtain sensitive information that may aid in further attacks. Technologies Affected Microsoft SQL Server 2017 for x64-based Systems Recommendations Block external access at...
rubygems: Escape sequence injection vulnerability in errors
An issue was discovered in RubyGems 2.6 and later through 3.0.2. Since Gem::CommandManagerrun calls alerterror without escaping, escape sequence injection is possible. There are many ways to cause an error...
Rockwell Automation/Allen-Bradley Multiple Devices Authentication Bypass (ICSA-18-310-02)
Binary data 720141.prm...
Rockwell Automation Micrologix 1400 <= 21.2 Exploitable Access Control
Binary data 720215.prm...
Rockwell Automation Micrologix 1400 <= 21.2 Fault Bits Exploit
Binary data 720224.prm...
SGI IRIX <= 6.4.x Run-Time Linker Arbitrary File Creation Exploit
SGI IRIX versions 6.4.x and below run-time linker rld arbitrary file creation exploit. !/bin/sh SGI IRIX /etc/passwd" /tmp/.x.sh chmod 755 /tmp/.x.sh RLDARGS="-log /.cshrc |/tmp/.x.sh" /sbin/su last -3 root echo " waiting 5mins for root to login..." sleep 300 su - w00t 0day.today 2019-04-30...
SGI IRIX 6.4.x Run-Time Linker Arbitrary File Creation
!/bin/sh SGI IRIX /etc/passwd" /tmp/.x.sh chmod 755 /tmp/.x.sh RLDARGS="-log /.cshrc |/tmp/.x.sh" /sbin/su last -3 root echo " waiting 5mins for root to login..." sleep 300 su - w00t...
The vulnerability of the run_command function in the Git distributed version control system allows a hacker to execute arbitrary commands.
The vulnerability of the runcommand programming interface in a distributed version control system like Git is related to insufficient cleaning of input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands remotely...
Microsoft Office 365 (2016 Click-to-Run) Multiple RCE Vulnerabilities (Apr 2019)
This host is missing an important security update according to Microsoft Office Click-to-Run updates. SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier:...
CVE-2019-0735: Improper Privilege Management
An elevation of privilege vulnerability exists when the Windows Client Server Run-Time Subsystem CSRSS fails to properly handle objects in memory, aka 'Windows CSRSS Elevation of Privilege Vulnerability'...
PT-2019-1812
Name of the Vulnerable Software and Affected Versions Windows Client Server Run-Time Subsystem CSRSS affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Windows Client Server Run-Time Subsystem CSRSS due to its failure to properly...
GraphicsMagick buffer overread vulnerability (CNVD-2019-12506)
GraphicsMagick is a simple set of image processing tools. The tool provides resizing, rotating, highlighting and other functions to images. A heap buffer over-read vulnerability exists in the ReadMIFFImage function in coders/miff.c in GraphicsMagick 1.4 snapshot-20190322 Q8, which can be exploite...
DEBIAN-CVE-2019-11006
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...
UBUNTU-CVE-2019-11006
In GraphicsMagick 1.4 snapshot-20190322 Q8, there is a heap-based buffer over-read in the function ReadMIFFImage of coders/miff.c, which allows attackers to cause a denial of service or information disclosure via an RLE packet...
RubyGems Code Execution Vulnerability
RubyGems is a Ruby package manager from the RubyGems organization. The product is mainly used for publishing and managing Ruby packages. A security vulnerability exists in RubyGems versions 2.6 through 3.0.2, which stems from Gem::CommandManagerrun calling alerterror without escaping, and can be...
vdsm: privilege escalation to root via systemd_run
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemdrun function exposed to the vdsm system user could be abused to execute arbitrary commands as root...
Moderate: Red Hat Security Advisory: vdsm security and bug fix update
An update for vdsm is now available for Red Hat Virtualization 4 for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...
vdsm: privilege escalation to root via systemd_run
A vulnerability was discovered in vdsm, version 4.19 through 4.30.3 and 4.30.5 through 4.30.8. The systemdrun function exposed to the vdsm system user could be abused to execute arbitrary commands as root...
