13248 matches found
CVE-2015-0233
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38...
CVE-2015-0233
CVE-2015-0233 affects the 389 Administration Server prior to version 1.1.38. The issue is described as multiple insecure temporary file vulnerabilities in the server. Impact is limited to confidentiality, integrity, and availability (per CVSS), with local attack vector and the need for high privi...
CVE-2015-0233
Multiple insecure Temporary File vulnerabilities in 389 Administration Server before 1.1.38...
CVE-2014-9513
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code...
CVE-2014-9513
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code...
Code injection
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code...
DEBIAN-CVE-2014-9513
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code...
UBUNTU-CVE-2014-9513
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code...
CVE-2014-9513
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code...
CVE-2014-9513
CVE-2014-9513 concerns insecure use of temporary files in xbindkeys-config 0.1.3-2, enabling remote code execution. The primary affected component is xbindkeys-config (version 0.1.3-2). The description across connected sources consistently states that insecure handling of temporary files allows r...
CVE-2014-9513
Insecure use of temporary files in xbindkeys-config 0.1.3-2 allows remote attackers to execute arbitrary code...
Legal Robot: Registration Allows Disposable Email Addresses
Hello LegalRobot, I'd like to report a nice little bug. As I already give a clear Title so I think u understand this.Simply LegalRobot allows disposable or temporary email address to register account. Let me know if u have any question Thanks Cheers Anas...
CVE-2015-3649
The open-uri-cached rubygem allows local users to execute arbitrary Ruby code by creating a directory under /tmp containing "openuri-" followed by a crafted UID, and putting Ruby code in said directory once a meta file is created...
DEBIAN-CVE-2015-3156
The writeconfig function in trove/guestagent/datastore/experimental/mongodb/service.py, resetconfiguration function in trove/guestagent/datastore/experimental/postgresql/service/config.py, writeconfig function in trove/guestagent/datastore/experimental/redis/service.py, writemycnf function in...
PT-2017-2800
Name of the Vulnerable Software and Affected Versions Subversion versions prior to 1.8.19 Subversion versions 1.9.x prior to 1.9.7 Subversion versions 1.10.0.x through 1.10.0-alpha3 git-annex versions prior to 6.20170818 Description A maliciously constructed URL could cause Subversion clients to...
CVE-2017-9633
An Improper Restriction of Operations within the Bounds of a Memory Buffer issue was discovered in the Continental AG Infineon S-Gold 2 PMB 8876 chipset on BMW several models produced between 2009-2010, Ford a limited number of P-HEV vehicles, Infiniti 2013 JX35, Infiniti 2014-2016 QX60, Infiniti...
PT-2017-19088 · Infineon · Infineon S-Gold 2
Name of the Vulnerable Software and Affected Versions: Infineon S-Gold 2 PMB 8876 chipset versions used in various vehicle models produced between 2009-2016 Description: An issue with improper restriction of operations within the bounds of a memory buffer was found. This issue may allow an attack...
PT-2019-5314
Name of the Vulnerable Software and Affected Versions Log4j versions 1.2 up to 1.2.17 Description The issue is related to the deserialization of untrusted data in the SocketServer class of Log4j 1.2, which can be exploited to remotely execute arbitrary code when combined with a deserialization...
PT-2017-19226 · Sma Solar Technology · Sunny Boy Tlst-21 +3
Name of the Vulnerable Software and Affected Versions: SMA Solar Technology products, specifically Sunny Boy TLST-21 and TL-21 and Sunny Tripower TL-10 and TL-30 Description: An issue allows an attacker to update device firmware without authentication using Sunny Explorer or the SMAdata2+ network...
CVE-2017-4922
VMware vCenter Server 6.5 prior to 6.5 U1 contains an information disclosure issue due to the service startup script using world writable directories as temporary storage for critical information. Successful exploitation of this issue may allow unprivileged host users to access certain critical...