PT-2017-16249

Name of the Vulnerable Software and Affected Versions Cloud Foundry Foundation cf-release versions prior to v260 UAA release 2.x versions prior to v2.7.4.16 UAA release 3.6.x versions prior to v3.6.10 UAA release 3.9.x versions prior to v3.9.12 UAA release versions prior to v3.17.0 UAA bosh relea...

Code injection

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

PYSEC-2017-3

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

PYSEC-2017-3

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

DEBIAN-CVE-2015-6240

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

UBUNTU-CVE-2015-6240

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

CVE-2015-6240

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

CVE-2015-6240

CVE-2015-6240 concerns Ansible, where the chroot, jail, and zone connection plugins allow a local attacker to escape a restricted environment via a symlink attack. Affected software is Ansible versions older than 1.9.2, as described in multiple sources (including GHSA and Debian/Ubuntu advisories...

CVE-2015-6240

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

CVE-2015-6240: Improper Link Resolution Before File Access

The chroot, jail, and zone connection plugins in ansible before 1.9.2 allow local users to escape a restricted environment via a symlink attack...

Weblate: DNSSEC Zone Walk using NSEC Records

Due to a design flaw in the NSEC records used by DNSSEC it is possible to discover all subdomains of a particular domain for which NSEC records are available. NSEC records are used by the weblate.org domain which means anyone can retreive all subdomains of weblate.org. These subdomains can contai...

CVE-2017-0241

An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...

Privilege escalation

An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...

CVE-2017-0241

An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...

CVE-2017-0241

Mode C: CVE-2017-0241 affects Microsoft Edge. The vulnerability is an elevation of privilege when Edge renders a domain-less URL, allowing actions in the Intranet Zone. Affected component: Edge rendering/domain handling; root cause details are not fully enumerated in the provided docs beyond the ...

CVE-2017-0241: Undefined Security Weakness

An elevation of privilege vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of...

Microsoft Edge Elevation of Privilege Vulnerability

A vulnerability exists when Microsoft Edge renders a domain-less page in the URL, which could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access functionality that is not typically available to the browser when browsing in the context of the Internet Zone. To...

PT-2017-10469

Name of the Vulnerable Software and Affected Versions Microsoft Edge affected versions not specified Description The issue arises when Microsoft Edge renders a domain-less page in the URL. This could allow Microsoft Edge to perform actions in the context of the Intranet Zone and access...

Gnulib Buffer Overflow Vulnerability

Gnulib is a GNU portability library that supports multi-system operation. A heap buffer overflow vulnerability exists in the saveabbr function of the timerz.c file in versions of Gnulib prior to 2017-04-26. An attacker can exploit this vulnerability to execute arbitrary code with the help of TZ...

Solarwinds LEM 6.3.1 Management Shell Arbitrary File Read Vulnerability

The management shell on Solarwinds Log and Event Manager Virtual Appliance version 6.3.1 allows the end user to edit the MOTD banner displayed during SSH logon. The editor provided for this is nano. This editor has a keyboard mapped function which lets the user import a file from the local file...