Lucene search
+L

606 matches found

NVD
NVD
•added 2019/03/06 9:29 p.m.•23 views

CVE-2019-1585

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

7.8CVSS7AI score0.00386EPSS
SaveExploits0References2
OSV
OSV
•added 2019/03/06 9:29 p.m.•14 views

CVE-2019-1585

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

7.8CVSS6.8AI score0.00386EPSS
SaveExploits0References2
Cisco
Cisco
•added 2019/03/06 4:00 p.m.•97 views

Cisco Nexus 9000 Series Fabric Switches Application-Centric Infrastructure Mode Privilege Escalation Vulnerability

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

6.7CVSS6.9AI score0.00386EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/03/06 12:00 a.m.•7 views

CVE-2019-1585: Undefined Security Weakness

A vulnerability in the controller authorization functionality of Cisco Nexus 9000 Series ACI Mode Switch Software could allow an authenticated, local attacker to escalate standard users with root privilege on an affected device. The vulnerability is due to a misconfiguration of certain sudoers...

7.8CVSS5.8AI score0.00386EPSS
SaveExploits0References3
Veracode
Veracode
•added 2019/01/15 9:02 a.m.•31 views

Privilege Escalation

openstack-neutron is vulnerable to privilege escalation attacks. The vulnerability exists as the default configuration in a sudoers file in the Red Hat openstack-neutron package before 2014.1.2-4, as used in Red Hat Enterprise Linux Open Stack Platform 5.0 for Red Hat Enterprise Linux 6, allows...

7.6CVSS6.6AI score0.03324EPSS
SaveExploits0References5Affected Software1
Check Point Advisories
Check Point Advisories
•added 2018/12/06 12:00 a.m.•62 views

Dell OpenManage Network Manager Authentication Bypass (CVE-2018-15767)

An authentication bypass vulnerability exists in Dell OpenManage Network Manager. The vulnerability is due to a misconfiguration in the /etc/sudoers file. Successful exploitation of this vulnerability would allow remote attackers to obtain sensitive information and gain unauthorized access into t...

9CVSS3.9AI score0.12324EPSS
SaveExploits6
NVD
NVD
•added 2018/11/30 5:29 p.m.•20 views

CVE-2018-15767

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

9CVSS8.5AI score0.12324EPSS
SaveExploits6References3
OSV
OSV
•added 2018/11/30 5:29 p.m.•4 views

CVE-2018-15767

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

8.8CVSS5.8AI score0.12324EPSS
SaveExploits6References3
Prion
Prion
•added 2018/11/30 5:29 p.m.•14 views

Authorization

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

9CVSS8.4AI score0.12324EPSS
SaveExploits6References3Affected Software1
Cvelist
Cvelist
•added 2018/11/30 5:00 p.m.•23 views

CVE-2018-15767 Improper Authorization Vulnerability

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

8.6AI score0.12324EPSS
SaveExploits6References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/11/30 12:00 a.m.•3 views

CVE-2018-15767: Incorrect Authorization

The Dell OpenManage Network Manager virtual appliance versions prior to 6.5.3 contain an improper authorization vulnerability caused by a misconfiguration in the /etc/sudoers file...

9CVSS7.7AI score0.12324EPSS
SaveExploits6References2
Positive Technologies
Positive Technologies
•added 2018/11/30 12:00 a.m.•2 views

PT-2018-13193

Name of the Vulnerable Software and Affected Versions Dell OpenManage Network Manager versions prior to 6.5.3 Description The issue is caused by a misconfiguration in the /etc/sudoers file, leading to an improper authorization. Recommendations For versions prior to 6.5.3, update to version 6.5.3 ...

9CVSS0.12324EPSS
SaveExploits6References5
NVD
NVD
•added 2018/08/22 5:29 p.m.•33 views

CVE-2017-2627

A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo-common package is much too permissive. It contains several lines for the mistral user that have wildcards that allow directory traversal...

8.2CVSS8.3AI score0.00661EPSS
SaveExploits0References1
OSV
OSV
•added 2018/08/22 5:29 p.m.•17 views

CVE-2017-2627

A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo-common package is much too permissive. It contains several lines for the mistral user that have wildcards that allow directory traversal...

8.2CVSS5.8AI score0.00661EPSS
SaveExploits0References1
Prion
Prion
•added 2018/08/22 5:29 p.m.•31 views

Directory traversal

A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo-common package is much too permissive. It contains several lines for the mistral user that have wildcards that allow directory traversal...

7.2CVSS8.1AI score0.00661EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2018/08/22 12:00 a.m.•8 views

CVE-2017-2627: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo-common package is much too permissive. It contains several lines for the mistral user that have wildcards that allow directory traversal...

8.2CVSS7.5AI score0.00661EPSS
SaveExploits0References3
zdt
zdt
•added 2018/06/27 12:00 a.m.•116 views

HPE VAN SDN 2.7.18.0503 - Unauthenticated Remote Root Exploit

Exploit for linux platform in category web applications ''' -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2018-008 : HPE VAN SDN Unauthenticated Remote Root Vulnerability Title: HPE VAN SDN Unauthenticated Remote Root Vulnerability Advisory ID: KL-001-2018-008 Publication Date: 2018.06.2...

0.2AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2018/06/27 12:00 a.m.•51 views

HPE VAN SDN 2.7.18.0503 - Remote Root

''' -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 KL-001-2018-008 : HPE VAN SDN Unauthenticated Remote Root Vulnerability Title: HPE VAN SDN Unauthenticated Remote Root Vulnerability Advisory ID: KL-001-2018-008 Publication Date: 2018.06.25 Publication URL:...

5.3AI score
SaveExploits0
Packet Storm
Packet Storm
•added 2018/06/26 12:00 a.m.•75 views

HP Enterprise VAN SDN Controller 2.7.18.0503 Remote Root

KL-001-2018-008 : HPE VAN SDN Unauthenticated Remote Root Vulnerability Title: HPE VAN SDN Unauthenticated Remote Root Vulnerability Advisory ID: KL-001-2018-008 Publication Date: 2018.06.25 Publication URL: https://korelogic.com/Resources/Advisories/KL-001-2018-008.txt 1. Vulnerability Details...

0.1AI score
SaveExploits0
KoreLogic Security
KoreLogic Security
•added 2018/06/25 12:00 a.m.•26 views

HPE VAN SDN Unauthenticated Remote Root Vulnerability

Vulnerability Details Affected Vendor: HP Enterprise Affected Product: VAN SDN Controller Affected Version: 2.7.18.0503 Platform: Embedded Linux CWE Classification: CWE-798: Use of Hard-coded Credentials, CWE-20: Improper Input Validation Impact: Privilege Escalation Attack vector: HTTP 2...

8.2AI score
SaveExploits0Affected Software1
Rows per page
Query Builder