🟡 Medium ⏱ 15–45 min Last verified: 2 April 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2010-2594, IBM PSIRT advisory page CVE: CVE-2010-2594 NVD summary: Multiple cross-site request forgery (CSRF) vulnerabilities in the web management interface in InterSect Alliance Snare Agent 3.2.3 and earlier on Solaris, Snare Agent […]
🟡 Medium ⏱ 10–30 min Last verified: 1 April 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE advisory SUSE-SU-2019:1570-1 (see also SUSE bugzilla) Related CVEs: CVE-2016-10245 Upstream summary: Insufficient sanitization of the query parameter in templates/html/search_opensearch.php could lead to reflected cross-site scripting or iframe injection. Table of contents Symptom & […]
🟡 Medium ⏱ 15–45 min Last verified: 30 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2006-6915, IBM Support Bulletin CVE: CVE-2006-6915 NVD summary: ftpd in IBM AIX 5.2.0 and 5.3.0 allows remote authenticated users to cause a denial of service (port exhaustion) via unspecified vectors. NOTE: some […]
🟠 High ⏱ 30–90 min Last verified: 30 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-4796, IBM Support Bulletin CVE: CVE-2007-4796 NVD summary: Buffer overflow in uucp in bos.net.uucp in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. References: secunia.com/advisories/26715 […]
🟠 High ⏱ 30–90 min Last verified: 30 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2006-7034, IBM PSIRT advisory page CVE: CVE-2006-7034 NVD summary: SQL injection vulnerability in directory.php in Super Link Exchange Script 1.0 might allow remote attackers to execute arbitrary SQL queries via the cat […]
🟢 Low ⏱ 5–15 min Last verified: 29 March 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2747-1 Related CVEs: CVE-2015-5950 Upstream summary: Dario Weisser discovered that the NVIDIA graphics drivers incorrectly handled certain IOCTL writes. A local attacker could use this issue to possibly gain root […]
🟡 Medium ⏱ 10–30 min Last verified: 29 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2013-4326 Upstream summary: RealtimeKit (aka rtkit) 0.5 does not properly use D-Bus for communication with a polkit authority, which allows local users to bypass intended […]
🟠 High ⏱ 30–90 min Last verified: 29 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2008-0588, IBM Support Bulletin CVE: CVE-2008-0588 NVD summary: Buffer overflow in the utape program in devices.scsi.tape.diag in IBM AIX 5.2 and 5.3 allows local users to gain privileges via unspecified vectors. References: […]
🟡 Medium ⏱ 15–45 min Last verified: 26 March 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2007-1918, IBM PSIRT advisory page CVE: CVE-2007-1918 NVD summary: The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, […]
🟡 Medium ⏱ 10–30 min Last verified: 26 March 2016 Affected versions: SLES 12 📖 ~4 min read • Source: SUSE security advisory (see also SUSE bugzilla) Related CVEs: CVE-2011-1946 Upstream summary: gnomesu-pam-backend in libgnomesu 1.0.0 prints an error message but proceeds with the non-error code path upon failure of the setgid or setuid […]
