Lucene search
+L

4843 matches found

Tenable Nessus
Tenable Nessus
added 2023/05/09 12:0 a.m.37 views

EulerOS 2.0 SP10 : sudo (EulerOS-SA-2023-1813)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo before 1.9.13 does not escape control characters in log messages. CVE-2023-28486 - Sudo before 1.9.13 does not escape control characters in...

5.3CVSS7.2AI score0.00953EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/05/09 12:0 a.m.32 views

EulerOS 2.0 SP10 : sudo (EulerOS-SA-2023-1831)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Sudo before 1.9.13 does not escape control characters in log messages. CVE-2023-28486 - Sudo before 1.9.13 does not escape control characters in...

5.3CVSS7.2AI score0.00953EPSS
SaveExploits0References3
Tenable Nessus
Tenable Nessus
added 2023/05/08 12:0 a.m.33 views

EulerOS 2.0 SP10 : systemd (EulerOS-SA-2023-1832)

According to the versions of the systemd packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - systemd before 247 does not adequately block local privilege escalation for some Sudo configurations, e.g., plausible sudoers files in which th...

7.8CVSS6.5AI score0.01051EPSS
SaveExploits4References2
Tenable Nessus
Tenable Nessus
added 2023/05/08 12:0 a.m.32 views

EulerOS 2.0 SP11 : sudo (EulerOS-SA-2023-1770)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user- provided environment variables SUDOEDITOR,...

7.8CVSS8.2AI score0.55367EPSS
SaveExploits20References2
OpenVAS
OpenVAS
added 2023/05/08 12:0 a.m.16 views

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1792)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.55367EPSS
SaveExploits20References2
OpenVAS
OpenVAS
added 2023/05/08 12:0 a.m.10 views

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1770)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.8CVSS8.2AI score0.55367EPSS
SaveExploits20References2
OpenVAS
OpenVAS
added 2023/05/08 12:0 a.m.13 views

Huawei EulerOS: Security Advisory for sudo (EulerOS-SA-2023-1723)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.1CVSS7.1AI score0.00283EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/08 12:0 a.m.19 views

Oracle Linux 7 : spacewalk-admin (ELSA-2023-12331)

The remote Oracle Linux 7 host has a package installed that is affected by a vulnerability as referenced in the ELSA-2023-12331 advisory. - Fix for CVE-2021-40348 Orabug: 33531467 Tenable has extracted the preceding description block directly from the Oracle Linux security advisory. Note that...

9.3CVSS7.9AI score0.01741EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
added 2023/05/07 12:0 a.m.27 views

EulerOS 2.0 SP11 : sudo (EulerOS-SA-2023-1792)

According to the versions of the sudo package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user- provided environment variables SUDOEDITOR,...

7.8CVSS8.2AI score0.55367EPSS
SaveExploits20References2
Tenable Nessus
Tenable Nessus
added 2023/05/07 12:0 a.m.23 views

EulerOS Virtualization 3.0.2.0 : sudo (EulerOS-SA-2023-1723)

According to the versions of the sudo package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Sudo 1.8.0 through 1.9.12, with the crypt password backend, contains a plugins/sudoers/auth/passwd.c array-out-of-bounds error that...

7.1CVSS7.5AI score0.00283EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/05/03 12:0 a.m.26 views

GLSA-202305-12 : sudo: Root Privilege Escalation

The remote host is affected by the vulnerability described in GLSA-202305-12 sudo: Root Privilege Escalation - In Sudo before 1.9.12p2, the sudoedit aka -e feature mishandles extra arguments passed in the user- provided environment variables SUDOEDITOR, VISUAL, and EDITOR, allowing a local attack...

7.8CVSS8.2AI score0.55367EPSS
SaveExploits20References3
NVD
NVD
added 2023/05/02 9:15 p.m.49 views

CVE-2022-30759

In Nokia One-NDS aka Network Directory Server through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands...

8.8CVSS9AI score0.01137EPSS
SaveExploits3References2
OSV
OSV
added 2023/05/02 9:15 p.m.10 views

CVE-2022-30759

In Nokia One-NDS aka Network Directory Server through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands...

8.8CVSS6AI score0.01137EPSS
SaveExploits3References2
Prion
Prion
added 2023/05/02 9:15 p.m.22 views

Command injection

In Nokia One-NDS aka Network Directory Server through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands...

6.5CVSS9AI score0.01137EPSS
SaveExploits3References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/05/02 12:0 a.m.14 views

CVE-2022-30759

In Nokia One-NDS aka Network Directory Server through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands...

9.1AI score0.01137EPSS
SaveExploits3References2
Positive Technologies
Positive Technologies
added 2023/05/02 12:0 a.m.11 views

PT-2023-13019 · Nokia · Nokia Onends

Name of the Vulnerable Software and Affected Versions: Nokia One-NDS aka Network Directory Server versions through 20.9 Description: The issue allows some users to exploit certain Sudo permissions, potentially escalating to root privileges and executing arbitrary commands. Recommendations: For...

8.8CVSS7.4AI score0.01137EPSS
SaveExploits3References6
Cvelist
Cvelist
added 2023/05/02 12:0 a.m.41 views

CVE-2022-30759

In Nokia One-NDS aka Network Directory Server through 20.9, some Sudo permissions can be exploited by some users to escalate to root privileges and execute arbitrary commands...

9.2AI score0.01137EPSS
SaveExploits3References2
CVE
CVE
added 2023/05/02 12:0 a.m.66 views

CVE-2022-30759

CVE-2022-30759 concerns Nokia OneNDS (Network Directory Server) up to version 20.9, where an incorrect permission assignment in sudo grants some users local privilege escalation to root and arbitrary command execution. Public materials describe affected users (e.g., Provgw, notifs, dbmrun), and s...

8.8CVSS8.9AI score0.01137EPSS
SaveExploits3References2Affected Software1
Cloud Foundry
Cloud Foundry
added 2023/04/29 12:0 a.m.49 views

USN-5963-1: Vim vulnerabilities | Cloud Foundry

Severity Medium Vendor Canonical Ubuntu Versions Affected Canonical Ubuntu 16.04 Canonical Ubuntu 18.04 Canonical Ubuntu 22.04 Description It was discovered that Vim was not properly performing memory management operations. An attacker could possibly use this issue to cause a denial of service or...

7.8CVSS7.8AI score0.00555EPSS
SaveExploits8Affected Software5
OSV
OSV
added 2023/04/28 11:5 a.m.7 views

OESA-2023-1264 dmidecode security update

Dmidecode reports information about your system's hardware as described in your system BIOS according to the SMBIOS/DMI standard see a sample output. This information typically includes system manufacturer, model name, serial number, BIOS version, asset tag as well as a lot of other details of...

4.6CVSS6.8AI score0.00523EPSS
SaveExploits1References2
Rows per page
Query Builder