Lucene search
K

2829 matches found

Tenable Nessus
Tenable Nessus
added 2017/07/31 12:0 a.m.23 views

VMware vCenter Server Appliance 6.5 < 6.5 U1 Multiple Vulnerabilities (VMSA-2017-0013)

The version of VMware vCenter Server Appliance installed on the remote host is 6.5 prior to 6.5 Update 1 6.5 U1. It is, therefore, affected by multiple vulnerabilities : - An insecure library loading issue exists due to the use of the LDLIBRARYPATH variable to look for specific files or libraries...

9.8CVSS7.4AI score0.01856EPSS
Exploits0References4
Broadcom
Broadcom
added 2017/06/23 12:0 a.m.6 views

BSA-2017-341

Security Advisory ID : BSA-2017-341 Component : Samba Revision : 1.0: Interim All versions of Samba from 3.5.0 onwards are vulnerable to a remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute...

10CVSS8.4AI score0.99448EPSS
Exploits24
UbuntuCve
UbuntuCve
added 2017/06/21 3:29 p.m.24 views

CVE-2017-9780

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the...

7.8CVSS7AI score0.00355EPSS
Exploits0References3
OSV
OSV
added 2017/06/21 3:29 p.m.22 views

CVE-2017-9780

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the...

7.8CVSS7.5AI score
Exploits0References4
Prion
Prion
added 2017/06/21 3:29 p.m.14 views

Design/Logic Flaw

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the...

7.2CVSS6.7AI score0.00355EPSS
Exploits0References4Affected Software2
OSV
OSV
added 2017/06/21 3:29 p.m.2 views

DEBIAN-CVE-2017-9780

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the...

7.8CVSS7.5AI score0.00355EPSS
Exploits0References1
OSV
OSV
added 2017/06/21 3:29 p.m.3 views

UBUNTU-CVE-2017-9780

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the...

7.8CVSS7.1AI score0.00355EPSS
Exploits0References4
NVD
NVD
added 2017/06/21 3:29 p.m.20 views

CVE-2017-9780

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the...

7.8CVSS7.5AI score0.00355EPSS
Exploits0References4
Cvelist
Cvelist
added 2017/06/21 3:0 p.m.26 views

CVE-2017-9780

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the...

7.5AI score0.00355EPSS
Exploits0References4
CVE
CVE
added 2017/06/21 3:0 p.m.81 views

CVE-2017-9780

CVE-2017-9780 affects Flatpak prior to 0.8.7. A third‑party app repository could supply malicious apps with files that have insecure permissions (e.g., setuid or world‑writeable), causing deployed files to run with elevated privileges or write to world‑writable locations. The worst‑case involves ...

7.8CVSS7.4AI score0.00355EPSS
Exploits0References4Affected Software1
Debian CVE
Debian CVE
added 2017/06/21 3:0 p.m.19 views

CVE-2017-9780

In Flatpak before 0.8.7, a third-party app repository could include malicious apps that contain files with inappropriate permissions, for example setuid or world-writable. The files are deployed with those permissions, which would let a local attacker run the setuid executable or write to the...

7.8CVSS7.6AI score0.00355EPSS
Exploits0
Nmap
Nmap
added 2017/06/10 3:29 a.m.1778 views

smb-vuln-cve-2017-7494 NSE Script

Checks if target machines are vulnerable to the arbitrary shared library load vulnerability CVE-2017-7494. Unpatched versions of Samba from 3.5.0 to 4.4.13, and versions prior to 4.5.10 and 4.6.4 are affected by a vulnerability that allows remote code execution, allowing a malicious client to...

10CVSS9.7AI score0.99448EPSS
Exploits33
GithubExploit
GithubExploit
added 2017/06/05 4:25 p.m.54 views

Exploit for Code Injection in Samba

CVE-2017-7494 Remote root exploit for the SAMBA CVE-2017-7494...

10CVSS9AI score0.99448EPSS
Exploits24
NVD
NVD
added 2017/05/30 6:29 p.m.25 views

CVE-2017-7494

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it...

10CVSS10AI score0.99448EPSS
Exploits24References17
OSV
OSV
added 2017/05/30 6:29 p.m.2 views

DEBIAN-CVE-2017-7494

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it...

9.8CVSS8.5AI score0.99448EPSS
Exploits24References1
OSV
OSV
added 2017/05/30 6:29 p.m.4 views

ALPINE-CVE-2017-7494

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it...

9.8CVSS8.5AI score0.99448EPSS
Exploits24References1
AlpineLinux
AlpineLinux
added 2017/05/30 6:0 p.m.43 views

CVE-2017-7494

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it...

10CVSS10AI score0.99448EPSS
Exploits24
ATTACKERKB
ATTACKERKB
added 2017/05/30 12:0 a.m.98 views

CVE-2017-7494

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it. Recent assessments: bwatters-r7 at April 14, 2020 4:47p...

10CVSS9.8AI score0.99448EPSS
In wildExploits24References20
ALT Linux
ALT Linux
added 2017/05/25 12:0 a.m.45 views

Security fix for the ALT Linux 7 package samba-DC version 4.5.10-alt1.M70P.1

4.5.10-alt1.M70P.1 built May 25, 2017 Evgeny Sinelnikov in task 183302 May 24, 2017 Evgeny Sinelnikov - Update to second spring security release - Fix longtime initialization bug in ldb proxy - Security fixes: + CVE-2017-7494 Remote code execution from a writable share...

10CVSS9.8AI score0.99448EPSS
Exploits24
CNVD
CNVD
added 2017/05/25 12:0 a.m.21 views

Samba Server Software Remote Code Execution Vulnerability

Samba is a software that runs on Linux and UNIX systems to implement the SMB protocol, which enables different computers to provide services for sharing resources such as files and printers. A remote code execution vulnerability exists in the Samba server software. An attacker can use a client to...

10CVSS8.4AI score0.99448EPSS
Exploits24References1
Rows per page
Query Builder