8908 matches found
MariaDB mysql_install_db Script Elevation of Privilege Vulnerability
The MariaDB database management system is a fork of MySQL, mainly maintained by the open source community under the GPL license. MariaDB is intended to be fully compatible with MySQL, including the API and command line, making it an easy replacement for MySQL. An elevation of privilege...
Security Bulletin: Multiple Vulnerabilities in Apache Commons Affect IBM Sterling B2B Integrator (CVE-2016-3092, CVE-2014-0050, CVE-2013-0248)
Summary Multiple vulnerabilities in Apache Commons exists in IBM Sterling B2B Integrator Vulnerability Details CVEID: CVE-2016-3092 DESCRIPTION: Apache Tomcat is vulnerable to a denial of service, caused by an error in the Apache Commons FileUpload component. By sending file upload requests, an...
CVE-2020-7221
mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...
CVE-2020-7221
mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...
CVE-2020-7221
mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...
UBUNTU-CVE-2020-7221
mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...
Privilege escalation
mysqlinstalldb in MariaDB 10.4.7 through 10.4.11 allows privilege escalation from the mysql user account to root because chown and chmod are performed unsafely, as demonstrated by a symlink attack on a chmod 04755 of authpamtooldir/authpamtool. NOTE: this does not affect the Oracle MySQL product,...
CVE-2020-7221
Removed by vendor...
CVE-2020-7221
Disclaimer: This data contains information about vulnerable...
CVE-2019-11251
CVE-2019-11251 affects Kubernetes kubectl cp. The issue stems from a symlink-based path traversal using tar output in a malicious container, allowing a combination of two symlinks to place a file outside the specified destination directory. Affected kubectl versions range from 1.1 through 1.12, a...
openSUSE Security Update : storeBackup (openSUSE-2020-119)
This update for storeBackup fixes the following issues : - CVE-2020-7040: Fixed a symlink attack which could lead to denial of service boo1156767. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2020-119...
openSUSE Security Update : apt-cacher-ng (openSUSE-2020-124)
This update for apt-cacher-ng fixes the following issues : - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data boo1157703. - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 boo1157706. C Tenable Network...
OPENSUSE-SU-2020:0146-1 Security update for apt-cacher-ng
This update for apt-cacher-ng fixes the following issues: - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data boo1157703. - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 boo1157706. This update was...
OPENSUSE-SU-2020:0124-1 Security update for apt-cacher-ng
This update for apt-cacher-ng fixes the following issues: - CVE-2019-18899: Fixed a symlink attack which could allow to overwrite arbitrary data boo1157703. - CVE-2020-5202: Fixed an information leak if a local user won a race condition to listen to localhost:3142 boo1157706...
Security update for apt-cacher-ng (important)
openSUSE Security Update: Security update for apt-cacher-ng Announcement ID: openSUSE-SU-2020:0146-1 Rating: important References: 1157703 1157706 Cross-References: CVE-2019-18899 CVE-2020-5202 Affected Products: openSUSE Backports SLE-15-SP1 An update that fixes two vulnerabilities is now...
Security update for apt-cacher-ng (important)
openSUSE Security Update: Security update for apt-cacher-ng Announcement ID: openSUSE-SU-2020:0124-1 Rating: important References: 1157703 1157706 Cross-References: CVE-2019-18899 CVE-2020-5202 Affected Products: openSUSE Leap 15.1 An update that fixes two vulnerabilities is now available...
CVE-2012-6114
The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/changelog or 2 /tmp/.git-effort...
CVE-2012-6114
The git-changelog utility in git-extras 1.7.0 allows local users to overwrite arbitrary files via a symlink attack on 1 /tmp/changelog or 2 /tmp/.git-effort...