8816 matches found
CVE-2012-3409
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...
CVE-2012-3409: Improper Input Validation
ecryptfs-utils: suid helper does not restrict mounting filesystems with nosuid,nodev which creates a possible privilege escalation...
PT-2019-6768
Name of the Vulnerable Software and Affected Versions ecryptfs-utils affected versions not specified Description The issue is related to the suid helper in ecryptfs-utils, which does not properly restrict mounting filesystems with nosuid and nodev options. This oversight creates a possible...
EulerOS 2.0 SP3 : cifs-utils (EulerOS-SA-2019-2562)
According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have...
EulerOS 2.0 SP3 : shadow-utils (EulerOS-SA-2019-2662)
According to the version of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Integer overflow in shadow 4.2.1 allows local users to gain privileges via crafted input to newuidmap.CVE-2016-6252 Note that Tenable Network...
EulerOS 2.0 SP3 : iscsi-initiator-utils (EulerOS-SA-2019-2596)
According to the version of the iscsi-initiator-utils packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Open-iSCSI through 2.0.875. A local attacker can cause the iscsiuio server to abort or potentially execut...
Default credentials
openstack-utils openstack-db has insecure password creation...
CVE-2013-1793
CVE-2013-1793 concerns openstack-utils and openstack-db with insecure password creation. The available connected documents confirm the affected components but do not provide remediation details. NVD metrics indicate a Network attack vector with no authentication required, and a high impact on con...
Moderate: Red Hat Security Advisory: httpd24-httpd security, bug fix, and enhancement update
An update for httpd24, httpd24-httpd, and httpd24-nghttp2 is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...
CVE-2013-1793: Missing Authentication for Critical Function
openstack-utils openstack-db has insecure password creation...
PT-2019-6853
Name of the Vulnerable Software and Affected Versions openstack-utils affected versions not specified Description The issue concerns insecure password creation in openstack-utils openstack-db. Recommendations At the moment, there is no information about a newer version that contains a fix for thi...
EulerOS 2.0 SP2 : cifs-utils (EulerOS-SA-2019-2366)
According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have...
EulerOS 2.0 SP2 : util-linux (EulerOS-SA-2019-2463)
According to the version of the util-linux packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Buffer overflow in text-utils/colcrt.c in colcrt in util-linux before 2.27 allows local users to cause a denial of service crash via a crafted...
EulerOS 2.0 SP2 : shadow-utils (EulerOS-SA-2019-2427)
According to the versions of the shadow-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - In shadow before 4.5, the newusers tool could be made to manipulate internal data structures in ways unintended by the authors. Malformed...
Amazon Linux AMI : glibc (ALAS-2019-1320)
In the GNU C Library aka glibc or libc6 through 2.28, the getaddrinfo function would successfully parse a string that contained an IPv4 address followed by whitespace and arbitrary characters, which could lead applications to incorrectly assume that it had parsed a valid string, without the...
Symfony security.http.utils Phishing Access
The vulnerability of the security.http.utils component of the Symfony software development and management platform involves redirecting URLs to an unreliable website. Exploiting this vulnerability allows attackers to conduct phishing attacks remotely and gain access to protected information using...
DEBIAN-CVE-2019-19048
A memory leak in the cryptoreportstat function in drivers/virt/vboxguest/vboxguestutils.c in the Linux kernel before 5.3.9 allows attackers to cause a denial of service memory consumption by triggering copyformuser failures, aka CID-e0b0cb938864...
EulerOS 2.0 SP5 : cifs-utils (EulerOS-SA-2019-2131)
According to the version of the cifs-utils package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Stack-based buffer overflow in cifskey.c or cifscreds.c in cifs-utils before 6.4, as used in pamcifscreds, allows remote attackers to have...
