2028 matches found
PT-2016-7023
Name of the Vulnerable Software and Affected Versions Pivotal Cloud Foundry cf-mysql-release versions 27 through 28 Description The issue allows remote attackers to obtain sensitive information by reading syslog messages. This can include cleartext credentials, which poses a significant security...
CVE-2016-6653 MySQL Audit logs sent to Syslog | Cloud Foundry
CVE-2016-6653 MySQL Audit logs sent to Syslog High Vendor Cloud Foundry Foundation Versions Affected Cloud Foundry MySQL Release versions 271 and 282 Description MariaDB’s auditplugin, incorporated in cf-mysql-release starting with cf-mysql-release v27, allows the Operator to enable audit trails,...
CVE-2016-6142
SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459...
Code injection
SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459...
CVE-2016-6142
SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459...
CVE-2016-6142
Vulnerability summary (CVE-2016-6142): SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) is susceptible to remote injection of arbitrary audit-trail fields into the SYSLOG via SQL protocol-related vectors (as described by SAP Security Note 2197459). Affected component is SAP HANA DB; root cause involv...
CVE-2016-6142: Undefined Security Weakness
SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459...
PT-2016-6768
Name of the Vulnerable Software and Affected Versions SAP HANA DB version 1.00.73.00.389160 Description The issue allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol. Recommendations For SAP HANA DB version 1.00.73.00.389160, upda...
SolarWinds Kiwi Syslog Server Service Path Privilege Elevation Vulnerability
SolarWinds Kiwi Syslog Server is a syslog server for IT administrators and network teams. SolarWinds Kiwi Syslog Server has a security vulnerability. It allows a local user to elevate privileges on the system to execute arbitrary code...
XenServer Syslog Rotation and Tuning
Disk space on XenServer's root partition is almost at or is at capacity perdf -h There are numerous compressed "gz" files in /var/log/ from Syslog rotation...
SolarWinds Kiwi Syslog Server Elevation of Privilege Vulnerability
SolarWinds network security management software products. The application can be installed on a windows system with the option to select the default security service. The default installation path "C:\Program Files x86" is selected when installing the 32-bit application, which may allow an...
SolarWinds Kiwi Syslog Server 9.5.1 - Unquoted Service Path Privilege Escalation
Exploit for windows platform in category local exploits Document Title: ================ SolarWinds Kiwi Syslog Server Unquoted Service Path Privilege Escalation Vulnerability Author: ======== Halil Dalabasmaz Release Date: ============== 29 SEP 2016 Product & Service Introduction:...
SolarWinds Kiwi Syslog Server 9.5.1 - Unquoted Service Path Privilege Escalation
SolarWinds Kiwi Syslog Server 9.5.1 - Unquoted Service Path Privilege Escalation Document Title: ================ SolarWinds Kiwi Syslog Server Unquoted Service Path Privilege Escalation Vulnerability Author: ======== Halil Dalabasmaz Release Date: ============== 29 SEP 2016 Product & Service...
SolarWinds Kiwi Syslog Server 9.5.1 - Unquoted Service Path Privilege Escalation
Document Title: ================ SolarWinds Kiwi Syslog Server Unquoted Service Path Privilege Escalation Vulnerability Author: ======== Halil Dalabasmaz Release Date: ============== 29 SEP 2016 Product & Service Introduction: ================================ Kiwi Syslog® Server is an affordable,...
ARTLAS - Apache Real Time Logs Analyzer System
Real time Apache log analyzer, based on top 10 OWASP vulnerabilities, identifies attempts of exploration in your web application, and notify you or your incident team on Telegram, Zabbix and Syslog/SIEM. ARTLAS uses the regular expression from the PHP-IDS project, to identify the attempts of...
Metasploit Cron Persistence Module
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'Cron Persistence', 'Description' = %q This module will create a cron or crontab entry to execute a payload. The module includes the ability to...
Debian DLA-584-1 : libsys-syslog-perl security update
John Lightsey and Todd Rinaldo reported that the opportunistic loading of optional modules can make many programs unintentionally load code from the current working directory which might be changed to another directory without the user realising and potentially leading to privilege escalation, as...
[SECURITY] [DLA 584-1] libsys-syslog-perl security update
Package : libsys-syslog-perl Version : 0.29-1+deb7u1 CVE ID : CVE-2016-1238 John Lightsey and Todd Rinaldo reported that the opportunistic loading of optional modules can make many programs unintentionally load code from the current working directory which might be changed to another directory...
openSUSE: Security Advisory for dropbear (openSUSE-SU-2016:1917-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...