|
246971
|
9.8 |
CRITICAL
Network
|
cobbler_project
redhat
|
cobbler
satellite
|
It was found that cobbler 2.6.x exposed all functions from its CobblerXMLRPCInterface class over XMLRPC. A remote, unauthenticated attacker could use this flaw to gain high privileges within cobbler,…
|
-
|
CVE-2018-10931
|
2024-11-21 12:42 |
2018-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246972
|
7.5 |
HIGH
Network
|
redhat
canonical
debian
postgresql
|
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
virtualization
enterprise_linux_server_eus
openstack
ubuntu_linux
debian_linux
postgresql
|
A vulnerability was found in libpq, the default PostgreSQL client library where libpq failed to properly reset its internal state between connections. If an affected version of libpq was used with "h…
|
CWE-89
SQL Injection
|
CVE-2018-10915
|
2024-11-21 12:42 |
2018-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246973
|
6.3 |
MEDIUM
Local
|
ovirt
redhat
|
vdsm
virtualization
|
It was found that vdsm before version 4.20.37 invokes qemu-img on untrusted inputs without limiting resources. By uploading a specially crafted image, an attacker could cause the qemu-img process to …
|
CWE-770
Allocation of Resources Without Limits or Throttling
|
CVE-2018-10908
|
2024-11-21 12:42 |
2018-08-10 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246974
|
5.5 |
MEDIUM
Local
|
ttembed_project
|
ttembed
|
An input validation flaw exists in ttembed. With a crafted input file, an attacker may be able to trigger a denial of service condition due to ttembed trusting attacker controlled values.
|
CWE-20
Improper Input Validation
|
CVE-2018-10922
|
2024-11-21 12:42 |
2018-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246975
|
7.5 |
HIGH
Network
|
ttembed_project
|
ttembed
|
Certain input files may trigger an integer overflow in ttembed input file processing. This overflow could potentially lead to corruption of the input file due to a lack of checking return codes of fg…
|
CWE-190
Integer Overflow or Wraparound
|
CVE-2018-10921
|
2024-11-21 12:42 |
2018-08-3 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246976
|
6.8 |
MEDIUM
Network
|
nic
|
knot_resolver
|
Improper input validation bug in DNS resolver component of Knot Resolver before 2.4.1 allows remote attacker to poison cache.
|
CWE-20
Improper Input Validation
|
CVE-2018-10920
|
2024-11-21 12:42 |
2018-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246977
|
7.1 |
HIGH
Local
|
canonical
|
cloud-init
|
The default cloud-init configuration, in cloud-init 0.6.2 and newer, included "ssh_deletekeys: 0", disabling cloud-init's deletion of ssh host keys. In some environments, this could lead to instances…
|
-
|
CVE-2018-10896
|
2024-11-21 12:42 |
2018-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246978
|
5.4 |
MEDIUM
Network
|
redhat
|
keycloak
single_sign-on
|
It was found that SAML authentication in Keycloak 3.4.3.Final incorrectly authenticated expired certificates. A malicious user could use this to access unauthorized data or possibly conduct further a…
|
CWE-295
Improper Certificate Validation
|
CVE-2018-10894
|
2024-11-21 12:42 |
2018-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246979
|
8.1 |
HIGH
Network
|
rpm
redhat
|
yum-utils
enterprise_linux_desktop
enterprise_linux_workstation
enterprise_linux_server
virtualization
|
A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an attacker controls a repository, they may…
|
-
|
CVE-2018-10897
|
2024-11-21 12:42 |
2018-08-2 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
|
246980
|
6.5 |
MEDIUM
Network
|
lftp_project
canonical
opensuse
|
lftp
ubuntu_linux
leap
|
It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the local system when reverse mirroring is used. A r…
|
CWE-20
Improper Input Validation
|
CVE-2018-10916
|
2024-11-21 12:42 |
2018-08-1 |
Show
|
GitHub
Exploit DB
Packet Storm
|
|
|
