Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
cisofy lynis vulnerabilities and exploits
(subscribe to this query)
294
VMScore
CVE-2014-3982
include/tests_webservers in Lynis prior to 1.5.5 on AIX allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.##### file.
Cisofy Lynis 1.5.3
Cisofy Lynis 1.5.2
Cisofy Lynis 1.5.1
Cisofy Lynis 1.5.0
Cisofy Lynis
294
VMScore
CVE-2014-3986
include/tests_webservers in Lynis prior to 1.5.5 allows local users to overwrite arbitrary files via a symlink attack on a /tmp/lynis.*.unsorted file with an easily determined name.
Cisofy Lynis
Cisofy Lynis 1.5.2
Cisofy Lynis 1.5.0
Cisofy Lynis 1.5.3
Cisofy Lynis 1.5.1
409
VMScore
CVE-2017-8108
Unspecified tests in Lynis prior to 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file.
Cisofy Lynis
329
VMScore
CVE-2020-13882
CISOfy Lynis prior to 3.0.0 has Incorrect Access Control because of a TOCTOU race condition. The routine to check the log and report file permissions was not working as intended and could be bypassed locally. Because of the race, an unprivileged attacker can set up a log and repo...
Cisofy Lynis
Fedoraproject Fedora 31
Fedoraproject Fedora 32
187
VMScore
CVE-2019-13033
In CISOfy Lynis 2.x up to and including 2.7.5, the license key can be obtained by looking at the process list when a data upload is being performed. This license can be used to upload data to a central Lynis server. Although no data can be extracted by knowing the license key, it...
Cisofy Lynis
Debian Debian Linux 8.0
Debian Debian Linux 9.0
Fedoraproject Fedora 30
Fedoraproject Fedora 31
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started