[Forgot Password]
Login  Register Subscribe

30480

 
 

423868

 
 

252271

 
 

909

 
 

196835

 
 

282

 
 
Paid content will be excluded from the download.

Filter
Matches : 16202 Download | Alert*

The host is installed with Apple MacOS X before 10.15 and is prone to a memory corruption vulnerability. A flaw is present in the application, which fails to properly handle memory related issue. Successful exploitation could allow attackers to execute arbitrary code with system privileges.

The host is installed with Apple MacOS X before 10.15 and is prone to a security bypass vulnerability. A flaw is present in the application, which fails to properly handle user privacy issue. Successful exploitation could allow attackers to make a device to be passively tracked by its Wi-Fi MAC address.

The host is installed with Apple Mac OS X 10.12.6, 10.13.6 or 10.15 and is prone to a privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle a logic issue. Successful exploitation allows an attacker to unexpectedly accept AirDrop transfers while in Everyone mode.

The host is installed with Puppet 2.6.x before 2.6.15 or 2.7.x before 2.7.13 and is prone to denial of service vulnerability. A flaw is present in the applications, which fail to properly handle REST requests. Successful exploitation allows attackers with agent SSL keys to corrupt the memory or filesystem.

The host is installed with Puppet 2.6.x before 2.6.15 or 2.7.x before 2.7.13 and is prone to symlink attack. A flaw is present in the applications, which fail to properly handle REST requests for a file from a remote filebucket. Successful exploitation allows attackers with an authorized SSL key and certain permissions on the puppet master to read arbitrary files via a symlink attack in conjunctio ...

The host is installed with Puppet 2.6.x before 2.6.14 or 2.7.x before 2.7.11 and is prone to privilege escalation vulnerability. A flaw is present in the application, which fails to properly handle k5login type. Successful exploitation allows attackers to gain privileges via a symlink attack on .k5login.

The host is installed with Puppet 2.6.x before 2.6.14 or 2.7.x before 2.7.11 and is prone to elevation of privilege vulnerability. A flaw is present in the application, which is caused by the improper dropping of group permissions when a process is forked. Successful exploitation allows attackers to execute arbitrary code on the system with root privileges.

The host is installed with Puppet 2.x before 2.6.18, 2.7.x before 2.7.21, 3.1.x before 3.1.1 and is prone to security bypass vulnerability. A flaw is present in the applications, which fail to handle the default configuration for puppet masters. Successful exploitation allows remote authenticated nodes to submit reports for other nodes via unspecified vectors.

The host is installed with Puppet 2.6.x before 2.6.18 and is prone to remote code-execution vulnerability. A flaw is present in the applications, which fail to handle a crafted request for a report. Successful exploitation allows remote authenticated users to execute arbitrary code on the puppet master, or an agent with puppet kick enabled.

The host is installed with Puppet 2.7.x before 2.7.21 or 3.1.x before 3.1.1 and is prone to SSL Protocol downgrade vulnerability. A flaw is present in the application, which fails to properly negotiate the SSL protocol between client and master. Successful exploitation allows remote attackers to conduct SSLv2 downgrade attacks against SSLv3 sessions via unspecified vectors.


Pages:      Start    1563    1564    1565    1566    1567    1568    1569    1570    1571    1572    1573    1574    1575    1576    ..   1620

© SecPod Technologies