10428 matches found
CVE-2017-0883
Nextcloud Server before 9.0.55 and 10.0.2 suffers from a permission increase on re-sharing via OCS API issue. A permission related issue within the OCS sharing API allowed an authenticated adversary to reshare shared files with an increasing permission set. This may allow an attacker to edit file...
kinman.com XSS vulnerability
Vulnerable URL: http://kinman.com/model-products.php?modelid=59"--!"=SRV set=Stratocaster=4=yes=Named SetsKNOXSS Details: Description| Value ---|--- Patched:| No Latest check for patch:| 31.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 1140113 VIP website...
Stored Cross-Site Scripting Vulnerability in Converged Smart STB z84
Convergent smart set-top box z84, is a set-top box product of Shenzhen Zhaoneng Xuntong Technology Co., Ltd, is a wireless wifi and smart TV connection set in one device, is widely used in hotels and homes with smart TV set-top box for telecommunication. Converged Smart STB z84 has a stored...
Converged Smart Set-Top Box z84 Vulnerability in Overstepping Rights of Any User to Modify Administrator Configuration
Convergent smart set-top box z84, is a set-top box product of Shenzhen Zhaoneng Xuntong Technology Co., Ltd, is a wireless wifi and smart TV connection set in one device, is widely used in hotels and homes with smart TV set-top box for telecommunication. Converged Smart STB z84 is vulnerable to a...
Linux kernel packet_set_ring function local denial of service vulnerability
The Linux kernel is the kernel used by the operating system Linux, released by the Linux Foundation in the United States. A security vulnerability exists in the 'packetsetring' function of the net/packet/afpacket.c file in Linux kernel versions 4.10.6 and earlier, which stems from a program that...
DEBIAN-CVE-2017-7308
The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service integer signedness error and out-of-bounds write, or gain privileges if the CAPNETRAW capability is held...
CVE-2017-5671
Honeywell Intermec PM23, PM42, PM43, PC23, PC43, PD43, and PC42 industrial printers before 10.11.013310 and 10.12.x before 10.12.013309 have /usr/bin/lua installed setuid to the itadmin account, which allows local users to conduct a BusyBox jailbreak attack and obtain root privileges by overwriti...
UBUNTU-CVE-2017-7308
The packetsetring function in net/packet/afpacket.c in the Linux kernel through 4.10.6 does not properly validate certain block-size data, which allows local users to cause a denial of service integer signedness error and out-of-bounds write, or gain privileges if the CAPNETRAW capability is held...
PT-2017-2268
Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 4.10.6 Description The issue is caused by a signedness error in the packet set ring function in the Linux kernel, which allows local users to cause a denial of service or gain privileges if the CAP NET RAW...
elfutils '__libelf_set_rawdata_wrlock' function denial of service vulnerability
elfutils is a collection of utilities and libraries for reading, creating and modifying ELF binaries. A denial of service vulnerability exists in the libelfsetrawdatawrlock function in elfutils's elfgetdata.c. A remote attacker could use this vulnerability to cause a denial of service via a...
USN-3246-1 eject vulnerability
Ilja Van Sprundel discovered that dmcrypt-get-device incorrectly checked setuid and setgid return values. A local attacker could use this issue to execute code as an administrator...
PT-2017-2372 · Debian +1 · Eject +1
Name of the Vulnerable Software and Affected Versions: eject versions 2.1.5+deb1+cvs20081104-13.1 and earlier on Debian eject versions before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.10.1 on Ubuntu 16.10 eject versions before 2.1.5+deb1+cvs20081104-13.1ubuntu0.16.04.1 on Ubuntu 16.04 LTS eject...
asterisk -- Buffer overflow in CDR's set user
The Asterisk project reports: No size checking is done when setting the user field on a CDR. Thus, it is possible for someone to use an arbitrarily large string and write past the end of the user field storage buffer. This allows the possibility of remote code injection...
set-fashion.com XSS vulnerability
Vulnerable URL: https://www.set-fashion.com/search/%22%3Etrolo%3Ci%3Etruli%3Cimg%20src%3Do%20onerror=prompt'openbugbounty'%3E Details: Description| Value ---|--- Patched:| No Latest check for patch:| 28.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed Alexa Rank| 754783...
Exploit for Race Condition in Canonical Ubuntu_Linux
PoC exploit for CVE-2016-5195, a Linux kernel vulnerability allo...
Eurohoo Government System set_border_color.php File Remote Command Execution Vulnerability
Ohuhu government system is the government portal system of Shanghai Ohuhu Network Technology Co. A remote code execution vulnerability exists in the setbordercolor.php file of the Ohuhu Government System due to improper filtering. An attacker can exploit this vulnerability to execute arbitrary ph...
kernel: Race condition in packet_set_ring leads to use after free
A race condition issue leading to a use-after-free flaw was found in the way the raw packet sockets implementation in the Linux kernel networking subsystem handled synchronization while creating the TPACKETV3 ring buffer. A local user able to open a raw packet socket requires the CAPNETRAW...
UBUNTU-CVE-2016-10151
The hesiodinit function in lib/hesiod.c in Hesiod 3.2.1 compares EUID with UID to determine whether to use configurations from environment variables, which allows local users to gain privileges via the 1 HESIODCONFIG or 2 HESDOMAIN environment variable and leveraging certain SUID/SGUID binary...
UBUNTU-CVE-2016-10029
The virtiogpusetscanout function in QEMU aka Quick Emulator built with Virtio GPU Device emulator support allows local guest OS users to cause a denial of service out-of-bounds read and process crash via a scanout id in a VIRTIOGPUCMDSETSCANOUT command larger than numscanouts...
