debian debian linux 7.0 vulnerabilities and exploits

(subscribe to this query)

An issue was discovered in Amanda 3.3.1. A user with backup privileges can trivially compromise a client installation. The "runtar" setuid root binary does not check for additional arguments supplied after --create, allowing users to manipulate commands and perform...

Zmanda Amanda 3.3.1 Redhat Enterprise Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 10.0 Debian Debian Linux 7.0 Debian Debian Linux 9.0

Race condition in the prepare_binprm function in fs/exec.c in the Linux kernel before 3.19.6 allows local users to gain privileges by executing a setuid program at a time instant when a chown to root is in progress, and the ownership is changed but the setuid bit is not yet...

Linux Linux Kernel Debian Debian Linux 7.0 Debian Debian Linux 8.01 Github repository available

Memory leak in dnsmasq before 2.78, when the --add-mac, --add-cpe-id or --add-subnet option is specified, allows remote attackers to cause a denial of service (memory consumption) via vectors involving DNS response creation....

Debian Debian Linux 7.0 Debian Debian Linux 7.1 Canonical Ubuntu Linux 14.04 Redhat Enterprise Linux Desktop 7.0 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 17.04 Redhat Enterprise Linux Server 7.0 Redhat Enterprise Linux Workstation 7.0 Debian Debian Linux 9.0 Thekelleys Dnsmasq1 EDB exploit available3 Github repositories available1 Article available

wp-includes/functions.php in WordPress before 4.9.1 does not require the unfiltered_html capability for upload of .js files, which might allow remote attackers to conduct XSS attacks via a crafted file....

Wordpress Wordpress Debian Debian Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 8.01 Github repository available

In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, the UMTS MAC dissector could crash. This was addressed in epan/dissectors/packet-umts_mac.c by rejecting a certain reserved value....

Wireshark Wireshark Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

Transmission through 2.92 relies on X-Transmission-Session-Id (which is not a forbidden header for Fetch) for access control, which allows remote attackers to execute arbitrary RPC commands, and consequently write to arbitrary files, via POST requests to /transmission/rpc in...

Transmissionbt Transmission Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.01 EDB exploit available

Drupal before 7.58, 8.x before 8.3.9, 8.4.x before 8.4.6, and 8.5.x before 8.5.1 allows remote attackers to execute arbitrary code because of an issue affecting multiple subsystems with default or common module configurations....

Drupal Drupal Debian Debian Linux 9.0 Debian Debian Linux 8.0 Debian Debian Linux 7.03 EDB exploits available1 Metasploit module available70 Github repositories available16 Articles available

In certain cases, Irssi before 1.0.5 may fail to verify that a Safe channel ID is long enough, causing reads beyond the end of the string....

Irssi Irssi Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

In opencv/modules/imgcodecs/src/utils.cpp, functions FillUniColor and FillUniGray do not check the input length, which can lead to integer overflow. If the image is from remote, may lead to remote code execution or denial of service. This affects Opencv 3.3 and earlier....

Opencv Opencv Debian Debian Linux 7.0 Debian Debian Linux 8.0 Debian Debian Linux 9.0

In Wireshark 2.4.0 to 2.4.5 and 2.2.0 to 2.2.13, the NBAP dissector could crash with a large loop that ends with a heap-based buffer overflow. This was addressed in epan/dissectors/packet-nbap.c by prohibiting the self-linking of DCH-IDs....

Wireshark Wireshark Debian Debian Linux 7.0 Debian Debian Linux 9.0 Debian Debian Linux 8.0

1 2 3 4 5 6 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook