12925 matches found
ansible: unsafe template evaluation of returned module data can lead to information disclosure
A flaw was discovered in the way Ansible templating was implemented, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed...
ansible: unsafe template evaluation of returned module data can lead to information disclosure
A flaw was discovered in the way Ansible templating was implemented, causing the possibility of information disclosure through unexpected variable substitution. By taking advantage of unintended variable substitution the content of any variable may be disclosed...
Codedoc Buffer Overflow Vulnerability
Codedoc is a documentation generator for C/C ++ code. A buffer overflow vulnerability exists in the 'addvariable' function of the codedoc.c file in Codedoc v3.2, which can be exploited by an attacker to cause a buffer overflow or heap overflow...
Acrunnt.exe Code Execution
The vulnerability of the Acrunnt.exe executable of the information protection tool Akord-Win64 relates to deficiencies in the mechanism for calling system libraries. Exploiting this vulnerability allows a perpetrator to execute arbitrary code using a specially crafted DLL library, by placing it a...
PT-2019-13292
Name of the Vulnerable Software and Affected Versions Codedoc version 3.2 Description The issue is related to a stack-based buffer overflow in the add variable function in codedoc.c, specifically involving the codedoc strlcpy function. Recommendations For Codedoc version 3.2, consider restricting...
Stored cross-site scripting in Grid component in Vaadin 7 and 8
Missing variable sanitization in Grid component in com.vaadin:vaadin-server versions 7.4.0 through 7.7.19 Vaadin 7.4.0 through 7.7.19, and 8.0.0 through 8.8.4 Vaadin 8.0.0 through 8.8.4 allows attacker to inject malicious JavaScript via unspecified vector. See CWE-80: Improper Neutralization of...
CVE-2019-12997
In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment aka injection in the DEFAULTSCOREHOST environment variable...
CVE-2019-12997
In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment aka injection in the DEFAULTSCOREHOST environment variable...
CVE-2019-12997
In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment aka injection in the DEFAULTSCOREHOST environment variable...
CVE-2019-12997
CVE-2019-12997 affects Loopchain up to version 2.2.1.3. The issue is a privilege-escalation via environment manipulation, specifically injection in the DEFAULT_SCORE_HOST environment variable, enabling a low-privilege shell user to escalate privileges. The vulnerability is described with high-sev...
CVE-2019-12997: Improper Neutralization of Special Elements used in an OS Command
In Loopchain through 2.2.1.3, an attacker can escalate privileges from a low-privilege shell by changing the environment aka injection in the DEFAULTSCOREHOST environment variable...
PT-2019-13078
Name of the Vulnerable Software and Affected Versions Loopchain versions prior to 2.2.1.4 Description The issue allows an attacker to escalate privileges from a low-privilege shell by changing the environment, specifically through injection in the DEFAULT SCORE HOST environment variable...
Cross Site Scripting (XSS) in MineMeld
A reflected cross-site scripting XSS vulnerability exists in Palo Alto Networks MineMeld. Ref CVE-2019-1578 A remote attacker able to convince an authenticated MineMeld admin to type malicious input in the MineMeld UI could execute arbitrary JavaScript code in the admin’s browser. This issue...
Ubuntu 16.04 LTS : web2py vulnerabilities (USN-4030-1)
The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4030-1 advisory. It was discovered that web2py does not properly check denied hosts before verifying passwords. An attacker could possibly use this issue to perform...
CVE-2019-12937
apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...
Buffer overflow
apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...
CVE-2019-12937
apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...
CVE-2019-12937
apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...
CVE-2019-12937: Out-of-bounds Write
apps/gsudo.c in gsudo in ToaruOS through 1.10.9 has a buffer overflow allowing local privilege escalation to the root user via the DISPLAY environment variable...
