Lucene search
K

20 matches found

Tenable Nessus
Tenable Nessus
added 2026/01/16 12:0 a.m.2 views

MiracleLinux 7 : PackageKit-1.1.5-2.0.1.el7.AXS7 (AXSA:2018-3051:01)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2018-3051:01 advisory. PackageKit: authentication bypass allows to install signed packages without administrator privileges CVE-2018-1106 Tenable has extracted the preceding...

5.5CVSS5.7AI score0.00027EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2018-11753

Malware in sbrugna...

5.5CVSS5.3AI score0.00027EPSS
Exploits0References8
SUSE CVE
SUSE CVE
added 2023/02/15 4:34 a.m.2 views

SUSE CVE-2018-1106

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

5.5CVSS5.7AI score0.00027EPSS
Exploits0References6
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.22 views

Huawei EulerOS: Security Advisory for PackageKit (EulerOS-SA-2018-1183)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00027EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2020/01/23 12:0 a.m.18 views

Huawei EulerOS: Security Advisory for PackageKit (EulerOS-SA-2019-2700)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

5.5CVSS5.5AI score0.00027EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2019/12/23 12:0 a.m.44 views

EulerOS 2.0 SP5 : PackageKit (EulerOS-SA-2019-2700)

According to the version of the PackageKit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed...

5.5CVSS5.6AI score0.00027EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2019/10/09 11:31 p.m.20 views

CVE-2018-1106

An authentication bypass flaw has been found in PackageKit that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

5.5CVSS5.6AI score0.00027EPSS
Exploits0References2
Veracode
Veracode
added 2019/01/15 9:21 a.m.16 views

Authentication Bypass

packagekit is vulnerable to authentication bypass attacks. The vulnerability exists as an authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install...

5.5CVSS5.3AI score0.00027EPSS
Exploits0References6Affected Software1
RedHat Linux
RedHat Linux
added 2018/04/24 6:40 p.m.1 views

PackageKit: authentication bypass allows to install signed packages without administrator privileges

An authentication bypass flaw has been found in PackageKit that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

5.5CVSS5.7AI score0.00027EPSS
Exploits0References5
OSV
OSV
added 2018/04/23 8:29 p.m.1 views

DEBIAN-CVE-2018-1106

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

5.5CVSS5.4AI score0.00027EPSS
Exploits0References1
Prion
Prion
added 2018/04/23 8:29 p.m.11 views

Authentication flaw

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

2.1CVSS5.3AI score0.00027EPSS
Exploits0References5Affected Software9
Debian CVE
Debian CVE
added 2018/04/23 8:0 p.m.21 views

CVE-2018-1106

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

5.5CVSS5.4AI score0.00027EPSS
Exploits0
UbuntuCve
UbuntuCve
added 2018/04/23 4:0 p.m.14 views

CVE-2018-1106

An authentication bypass flaw has been found in PackageKit before 1.1.10 that allows users without administrator privileges to install signed packages. A local attacker can use this vulnerability to install vulnerable packages to further compromise a system...

5.5CVSS5.9AI score0.00027EPSS
Exploits0References2
n0where
n0where
added 2016/06/15 5:13 p.m.33 views

Live Platform for Android Security Professionals: Android Tamer

AndroidTamer started out as a VirtualMachine for Android Security Professionals. This Environment allows people to work on large array of android security related task’s ranging from Malware Analysis, Penetration Testing and Reverse Engineering. AndroidTamer is, at this point the only fully...

0.1AI score
Exploits0
RedHat Linux
RedHat Linux
added 2014/12/09 7:50 p.m.2 views

rpm: race condition during the installation process

It was found that RPM wrote file contents to the target installation directory under a temporary name, and verified its cryptographic signature only after the temporary file has been written completely. Under certain conditions, the system interprets the unverified temporary file contents and...

7.6CVSS7.2AI score0.04712EPSS
Exploits0References4
Fedora
Fedora
added 2013/07/15 12:58 a.m.24 views

[SECURITY] Fedora 17 Update: zeroinstall-injector-2.3-1.fc17

The Zero Install Injector makes it easy for users to install software without needing root privileges. It takes the URL of a program and runs it downloading it first if necessary. Any dependencies of the program are fetched in the same way. The user controls which version of the program and its...

4.3CVSS1.6AI score0.02979EPSS
Exploits0
OpenVAS
OpenVAS
added 2009/03/02 12:0 a.m.24 views

Mandrake Security Advisory MDVSA-2009:049-1 (pycrypto)

The remote host is missing an update to pycrypto announced via advisory MDVSA-2009:049-1. OpenVAS Vulnerability Test $Id: mdksa20090491.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:049-1 pycrypto Authors: Thomas Reinke Copyright: Copyright c 2009...

10CVSS0.3AI score0.29776EPSS
Exploits2
OpenVAS
OpenVAS
added 2009/03/02 12:0 a.m.27 views

Mandrake Security Advisory MDVSA-2009:026-1 (phpMyAdmin)

The remote host is missing an update to phpMyAdmin announced via advisory MDVSA-2009:026-1. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

6CVSS7.6AI score0.08276EPSS
Exploits1References1
Tenable Nessus
Tenable Nessus
added 2004/07/06 12:0 a.m.25 views

RHEL 2.1 : xchat (RHSA-2002:124)

A security issue in XChat allows a malicious server to execute arbitrary commands. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IRC server when a /dns query is executed. Because XChat resolves hostnames by passing the configured...

7.5CVSS5.8AI score0.01079EPSS
Exploits0References3
RedHat Linux
RedHat Linux
added 2002/08/05 9:4 p.m.3 views

Important: Red Hat Security Advisory: xchat security update

A security issue in XChat allows a malicious server to execute arbitrary commands. XChat is a popular cross-platform IRC client. Versions of XChat prior to 1.8.9 do not filter the response from an IRC server when a /dns query is executed. Because XChat resolves hostnames by passing the configured...

7.5CVSS6AI score0.01079EPSS
Exploits0References2
Rows per page
Query Builder