50 matches found
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
EUVD-2024-55105
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148
The KerOS operating system (versions prior to 5.12 ) is vulnerable to a security flaw in the wmp-agent service. The service fails to properly validate so-called 'magic URLs' , which could allow an unauthenticated remote attacker to execute arbitrary OS commands with root privileges if the service...
PT-2025-48467
Name of the Vulnerable Software and Affected Versions KerOS versions prior to 5.12 Description The wmp-agent service does not correctly validate ‘magic URLs’, potentially allowing a remote attacker without authentication to execute arbitrary operating system commands as root if the service is...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148: Improper Control of Generation of Code
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
CVE-2024-39148
The service wmp-agent of KerOS prior 5.12 does not properly validate so-called ‘magic URLs’ allowing an unauthenticated remote attacker to execute arbitrary OS commands as root when the service is reachable over network. Typically, the service is protected via local firewall...
SUSE SLES15 Security Update : permissions (SUSE-SU-2020:2814-1)
This update for permissions fixes the following issues : whitelist WMP bsc1161335, bsc1176625 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...
SUSE SLED15 / SLES15 Security Update : permissions (SUSE-SU-2020:2830-1)
This update for permissions fixes the following issues : whitelist WMP bsc1161335, bsc1176625 Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible...
openSUSE Security Update : permissions (openSUSE-2020-1658)
This update for permissions fixes the following issues : - whitelist WMP bsc1161335, bsc1176625 This update was imported from the SUSE:SLE-15-SP1:Update update project. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
OPENSUSE-SU-2020:1658-1 Security update for permissions
This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625 This update was imported from the SUSE:SLE-15-SP1:Update update project...
PT-2020-21622
Name of the Vulnerable Software and Affected Versions SUSE:SLE-15-SP1:Update affected versions not specified Description The issue concerns permissions and involves whitelisting WMP. Recommendations At the moment, there is no information about a newer version that contains a fix for this...
Security update for permissions (moderate)
openSUSE Security Update: Security update for permissions Announcement ID: openSUSE-SU-2020:1658-1 Rating: moderate References: 1161335 1176625 Affected Products: openSUSE Leap 15.1 An update that contains security fixes can now be installed. Description: This update for permissions fixes the...
SUSE-SU-2020:2830-1 Security update for permissions
This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625...
PT-2020-22746
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue pertains to permissions and involves whitelisting WMP. There is no information provided about the estimated number of potentially affected devic...
SUSE-SU-2020:2814-1 Security update for permissions
This update for permissions fixes the following issues: - whitelist WMP bsc1161335, bsc1176625...
PT-2020-22745
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description The issue pertains to permissions and involves whitelisting WMP. There is no information provided about the estimated number of potentially affected devic...
Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups
No description provided by source. Source: http://code.google.com/p/skylined/issues/detail?id=21 Exploit Title: Firefox 3.5.10 & 3.6.6 WMP Memory Corruption Using Popups Date: 2010-10-13 Author: berendjanwever Version: FF 3.5.10 & 3.6.6 with WMP 10 & 11 Tested on: Windows XP sp3 HTML HEAD SCRIPT...