Lucene search
+L

807 matches found

NVD
NVD
•added 2011/05/13 5:05 p.m.•33 views

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

2.1CVSS6.4AI score0.00378EPSS
SaveExploits0References6
Prion
Prion
•added 2011/05/13 5:05 p.m.•30 views

Code injection

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

2.1CVSS7AI score0.00378EPSS
SaveExploits0References6Affected Software2
UbuntuCve
UbuntuCve
•added 2011/05/13 5:05 p.m.•49 views

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

2.1CVSS5.9AI score0.00378EPSS
SaveExploits0References1
Debian CVE
Debian CVE
•added 2011/05/13 5:00 p.m.•68 views

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

2.1CVSS6.1AI score0.00378EPSS
SaveExploits0
CVE
CVE
•added 2011/05/13 5:00 p.m.•103 views

CVE-2011-0995

The CVE-2011-0995 issue affects the sqlite3-ruby gem in the rubygem-sqlite3 package for SUSE Linux Enterprise (SLE) 11 SP1. Vulnerable: sqlite3-ruby before 1.2.4-0.5.1; cause: weak permissions on unspecified files. Impact: local users can gain privileges via unknown vectors. Remediation: upgrade ...

2.1CVSS6.6AI score0.00378EPSS
SaveExploits0References6Affected Software2
Cvelist
Cvelist
•added 2011/05/13 5:00 p.m.•43 views

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

6.4AI score0.00378EPSS
SaveExploits0References6
Mend
Mend
•added 2011/05/13 5:00 p.m.•7 views

CVE-2011-0995

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

5.1CVSS0.00378EPSS
SaveExploits0References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/05/13 12:00 a.m.•10 views

CVE-2011-0995: Undefined Security Weakness

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

2.1CVSS5.8AI score0.00378EPSS
SaveExploits0References2
RubySec
RubySec
•added 2011/05/13 12:00 a.m.•37 views

rubygem-sqlite3 gem uses weak file permissions

The sqlite3-ruby gem in the rubygem-sqlite3 package before 1.2.4-0.5.1 in SUSE Linux Enterprise SLE 11 SP1 uses weak permissions for unspecified files, which allows local users to gain privileges via unknown vectors...

2.1CVSS6.9AI score0.00378EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2011/05/13 12:00 a.m.•7 views

PT-2011-2802

Name of the Vulnerable Software and Affected Versions rubygem-sqlite3 version 1.2.4-0.5.1 and earlier Description The issue is related to weak permissions for unspecified files in the sqlite3-ruby gem, which can be exploited by local users to gain privileges. Recommendations For versions prior to...

2.1CVSS0.00378EPSS
SaveExploits0References14
OpenVAS
OpenVAS
•added 2011/05/10 12:00 a.m.•60 views

Mandriva Update for tcl-sqlite3 MDVA-2011:019 (tcl-sqlite3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

10CVSS8.1AI score0.73835EPSS
SaveExploits17References2
OpenVAS
OpenVAS
•added 2011/05/10 12:00 a.m.•47 views

Mandriva Update for tcl-sqlite3 MDVA-2011:019 (tcl-sqlite3)

Check for the Version of tcl-sqlite3 OpenVAS Vulnerability Test Mandriva Update for tcl-sqlite3 MDVA-2011:019 tcl-sqlite3 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

10CVSS8.3AI score0.73835EPSS
SaveExploits29References2
Tenable Nessus
Tenable Nessus
•added 2011/05/09 12:00 a.m.•15 views

MDVA-2011:019 : tcl-sqlite3

The TCL extension for sqlite3 was not provided with the the MDVSA-2011:079 advisory. This advisory addresses the problem and provides the missing packages. %NASLMINLEVEL 70300 @DEPRECATED@ This script has been deprecated as the associated patch is not currently a security fix. Disabled on...

6.9AI score
SaveExploits0References1
OpenVAS
OpenVAS
•added 2011/05/05 12:00 a.m.•49 views

Mandriva Update for firefox MDVSA-2011:079 (firefox)

Check for the Version of firefox OpenVAS Vulnerability Test Mandriva Update for firefox MDVSA-2011:079 firefox Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

10CVSS0.6AI score0.73835EPSS
SaveExploits29References2
Tenable Nessus
Tenable Nessus
•added 2011/05/02 12:00 a.m.•45 views

Mandriva Linux Security Advisory : firefox (MDVSA-2011:079)

Chris Evans of the Chrome Security Team reported that the XSLT generate-id function returned a string that revealed a specific valid address of an object on the memory heap. It is possible that in some cases this address would be valuable information that could be used by an attacker while...

10CVSS8.7AI score0.73835EPSS
SaveExploits29References17
The Hacker News
The Hacker News
•added 2011/04/30 5:57 p.m.•34 views

Pangolin 3.2.3 - Automatic SQL injection penetration testing tool New Release !

Pangolin 3.2.3 - Automatic SQL injection penetration testing tool New Release ! Pangolin is an automatic SQL injection penetration testing Pen-testing tool for Website manager or IT Security analyst. Its goal is to detect and take advantage of SQL injection vulnerabilities on web applications...

8.5AI score
SaveExploits0
NVD
NVD
•added 2011/04/18 6:55 p.m.•36 views

CVE-2011-1717

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information...

2.1CVSS6.2AI score0.00292EPSS
SaveExploits1References4
Prion
Prion
•added 2011/04/18 6:55 p.m.•30 views

Information disclosure

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information...

2.1CVSS6.7AI score0.00292EPSS
SaveExploits1References4
Cvelist
Cvelist
•added 2011/04/18 6:00 p.m.•53 views

CVE-2011-1717

Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information...

6.2AI score0.00292EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2011/04/18 12:00 a.m.•10 views

PT-2011-3317

Name of the Vulnerable Software and Affected Versions Skype for Android affected versions not specified Description The issue concerns the storage of sensitive user data without encryption in sqlite3 databases. These databases have weak permissions, allowing local applications to access private...

2.1CVSS5.8AI score0.00292EPSS
SaveExploits1References5
Rows per page
Query Builder