Notre sélection d'alertes et avis SSI.
Sources : US Cert, Cert EU, Cert FR, Cnil, VulDB.

CleanMyMac X privilege escalation [CVE-2018-4035]

A vulnerability was found in CleanMyMac X (version unknown). It has been classified as critical. Affected is code. The manipulation with an unknown input leads to a privilege escalation vulnerability. CWE is classifying the issue as CWE-269....
Auteur: VulDB

CleanMyMac X privilege escalation [CVE-2018-4034]

A vulnerability was found in CleanMyMac X (unknown version) and classified as critical. This issue affects a part. The manipulation with an unknown input leads to a privilege escalation vulnerability. Using CWE to declare the problem leads to...
Auteur: VulDB

CleanMyMac X privilege escalation [CVE-2018-4033]

A vulnerability has been found in CleanMyMac X (the affected version is unknown) and classified as critical. This vulnerability affects a functionality. The manipulation with an unknown input leads to a privilege escalation vulnerability. The...
Auteur: VulDB

CleanMyMac X privilege escalation [CVE-2018-4032]

A vulnerability, which was classified as critical, was found in CleanMyMac X (the affected version unknown). This affects a function. The manipulation with an unknown input leads to a privilege escalation vulnerability. CWE is classifying the...
Auteur: VulDB

OpenSSH 7.9 scp Client scp.c Filename privilege escalation

A vulnerability classified as critical was found in OpenSSH 7.9. Affected by this vulnerability is the functionality of the file scp.c of the component scp Client. The manipulation as part of a Filename leads to a privilege escalation...
Auteur: VulDB

WinSCP up to 5.13 scp core/ScpFileSystem.cpp TSCPFileSystem::SCPSink directory traversal

A vulnerability classified as problematic has been found in WinSCP up to 5.13. Affected is the function TSCPFileSystem::SCPSink of the file core/ScpFileSystem.cpp of the component scp. The manipulation with an unknown input leads to a directory...
Auteur: VulDB

gitolite up to 3.6.10 rsync .gitolite.rc unknown vulnerability

A vulnerability was found in gitolite up to 3.6.10. It has been rated as problematic. This issue affects some processing of the file .gitolite.rc of the component rsync Handler. The impact remains unknown. The summary by CVE is:commands/rsync in...
Auteur: VulDB

CIMTechniques CIMScan 6.0/6.1/6.2 SOAP WSDL Parser SQL privilege escalation

A vulnerability was found in CIMTechniques CIMScan 6.0/6.1/6.2. It has been classified as critical. This affects code of the component SOAP WSDL Parser. The manipulation with an unknown input leads to a privilege escalation vulnerability (SQL)....
Auteur: VulDB

Intel SSD Data Center Tool up to 3.0.16 on Windows Directory Permission privilege escalation

A vulnerability, which was classified as critical, has been found in Intel SSD Data Center Tool up to 3.0.16 on Windows. Affected by this issue is some functionality of the component Directory Permission. The manipulation with an unknown input...
Auteur: VulDB

Intel SGX SDK/SGX Platform Software prior 2.2.100 on Windows privilege escalation

A vulnerability was found in Intel SGX SDK and SGX Platform Software on Windows. It has been declared as critical. This vulnerability affects a code block. The manipulation with an unknown input leads to a privilege escalation vulnerability. The...
Auteur: VulDB

Cisco Webex Business Suite MyWebex cross site scripting [CVE-2018-15461]

A vulnerability was found in Cisco Webex Business Suite (affected version not known) and classified as problematic. Affected by this issue is a part of the component MyWebex. The manipulation with an unknown input leads to a cross site scripting...
Auteur: VulDB

Cisco Email Security Appliance Email Message Filter CPU Exhaustion denial of service

A vulnerability has been found in Cisco Email Security Appliance (affected version unknown) and classified as problematic. Affected by this vulnerability is a functionality of the component Email Message Filter. The manipulation with an unknown...
Auteur: VulDB

Cisco FirePOWER Management Center Shell Access Filter denial of service

A vulnerability, which was classified as problematic, was found in Cisco FirePOWER Management Center (version unknown). Affected is a function of the component Shell Access Filter. The manipulation with an unknown input leads to a denial of...
Auteur: VulDB

Cisco Prime Infrastructure Web-based Management Interface cross site scripting

A vulnerability, which was classified as problematic, has been found in Cisco Prime Infrastructure (unknown version). This issue affects some functionality of the component Web-based Management Interface. The manipulation with an unknown input...
Auteur: VulDB

Cisco Identity Services Engine Admin Portal Password information disclosure

A vulnerability classified as problematic was found in Cisco Identity Services Engine (the affected version is unknown). This vulnerability affects the functionality of the component Admin Portal. The manipulation with an unknown input leads to...
Auteur: VulDB

Cisco Email Security Appliance SMIME Crash denial of service

A vulnerability classified as problematic has been found in Cisco Email Security Appliance (the affected version unknown). This affects an unknown function of the component SMIME Handler. The manipulation with an unknown input leads to a denial...
Auteur: VulDB

Intel Proset Wireless up to 20.90.0.6 Directory Permission privilege escalation

A vulnerability was found in Intel Proset Wireless up to 20.90.0.6. It has been rated as critical. Affected by this issue is some processing of the component Directory Permission. The manipulation with an unknown input leads to a privilege...
Auteur: VulDB

Nelson Open Source ERP 6.3.1 db/utils/query/data.xml query sql injection

A vulnerability was found in Nelson Open Source ERP 6.3.1. It has been classified as critical. Affected is code of the file db/utils/query/data.xml. The manipulation of the argument query as part of a Parameter leads to a sql injection...
Auteur: VulDB

FRRouting up to 2.x/3.0.3/4.0.0/5.0.1/6.0.1 bgpd BGP UPDATE Packet denial of service

A vulnerability was found in FRRouting up to 2.x/3.0.3/4.0.0/5.0.1/6.0.1 and classified as problematic. This issue affects a part of the component bgpd. The manipulation as part of a BGP UPDATE Packet leads to a denial of service vulnerability....
Auteur: VulDB

ShopXO 1.2.0 FileUtil.php UnlinkDir/rmdir directory traversal

A vulnerability has been found in ShopXO 1.2.0 and classified as critical. This vulnerability affects the function UnlinkDir/rmdir of the file FileUtil.php. The manipulation with an unknown input leads to a directory traversal vulnerability. The...
Auteur: VulDB

ShopXO 1.2.0 Index.php Add privilege escalation

A vulnerability, which was classified as critical, was found in ShopXO 1.2.0. This affects the function Add of the file application\install\controller\Index.php. The manipulation with an unknown input leads to a privilege escalation...
Auteur: VulDB

elFinder up to 2.1.44 php/elFinder.class.php information disclosure

A vulnerability, which was classified as problematic, has been found in elFinder up to 2.1.44. Affected by this issue is some functionality of the file php/elFinder.class.php. The manipulation with an unknown input leads to a information...
Auteur: VulDB

Intel System Support Utility prior 2.5.0.15 on Windows privilege escalation

A vulnerability classified as critical was found in Intel System Support Utility on Windows. Affected by this vulnerability is the functionality. The manipulation with an unknown input leads to a privilege escalation vulnerability. The CWE...
Auteur: VulDB

Imperva SecureSphere 11.5/12.0/13.0 SSH Login Key privilege escalation

A vulnerability classified as critical has been found in Imperva SecureSphere 11.5/12.0/13.0. Affected is an unknown function of the component SSH Login Key Handler. The manipulation with an unknown input leads to a privilege escalation...
Auteur: VulDB

Imperva SecureSphere 12.0.0.50 Sealed-Mode Code Execution

A vulnerability was found in Imperva SecureSphere 12.0.0.50. It has been rated as critical. This issue affects some processing of the component Sealed-Mode. The manipulation with an unknown input leads to a privilege escalation vulnerability...
Auteur: VulDB
First1728172917301731173217331734173517361737Last

Événements SSI