13871 matches found
Moderate: Red Hat Security Advisory: instack-undercloud security, bug fix, and enhancement update
An update for instack-undercloud is now available for Red Hat OpenStack Platform 11.0 Ocata. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
The vulnerability of the SIP server Kamailio arises from the lack of restrictions on file uploads, allowing attackers to upload or transfer unreliable files.
The vulnerability of the SIP server Kamailio is related to the unlimited loading of dangerous files. Exploiting this vulnerability allows a malicious actor to upload or transfer unreliable files to the /tmp/kamailiofifo directory remotely...
PT-2017-13459 · D Link · D-Link Dir-850L
Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 Description: The issue concerns a problem where an attacker can execute malicious scripts. This is possible due to the presence of a cross-site scripting XSS flaw in the action...
CVE-2017-7560: Insecure Temporary File
It was found that rhnsd PID files are created as world-writable that allows local attackers to fill the disks or to kill selected processes...
Moderate: Red Hat Security Advisory: instack-undercloud security update
An update for instack-undercloud is now available for Red Hat OpenStack Platform 8.0 Liberty director. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is availabl...
instack-undercloud: uses hardcoded /tmp paths
A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...
Moderate: Red Hat Security Advisory: instack-undercloud security update
An update for instack-undercloud is now available for Red Hat Enterprise Linux OpenStack Platform director 7.0 for RHEL 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity...
instack-undercloud: uses hardcoded /tmp paths
A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...
DEBIAN-CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
CVE-2015-1590
The kamcmd administrative utility and default configuration in kamailio before 4.3.0 use /tmp/kamailioctl...
instack-undercloud: uses hardcoded /tmp paths
A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...
kamailio /tmp/kamailio_fifo Insecure Temporary File Creation Vulnerability
kamailio is an open source GPL-based SIP Session Initiation Protocol, Session Initiation Protocol server . A security vulnerability exists in /tmp/kamailiofifo in kamailio version 4.0.1. A remote attacker can exploit this vulnerability to perform a symbolic link attack, overwrite arbitrary files,...
Android 'su' Privilege Escalation
This module uses the su binary present on rooted devices to run a payload as root. A rooted Android device will contain a su binary often linked with an application that allows the user to run commands as root. This module will use the su binary to execute a command stager as root. The command...
Moderate: Red Hat Security Advisory: instack-undercloud security update
An update for instack-undercloud is now available for Red Hat OpenStack Platform 9.0 Mitaka director. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available...
instack-undercloud: uses hardcoded /tmp paths
A flaw was found in instack-undercloud where pre-install and security policy scripts used insecure temporary files. A local user could exploit this flaw to conduct a symbolic-link attack, allowing them to overwrite the contents of arbitrary files...
CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
DEBIAN-CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
