Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 27

Export CSV
CVE-2010-2221

scsi-target-utils: stack buffer overflow vulnerability

Multiple buffer overflows in the iSNS implementation in isns.c in (1) Linux SCSI target framework (aka tgt or scsi-target-utils) before 1.0.6, (2) iSCSI Enterprise Target (aka iscsitarget or IET) 1.4.20.1 and earlier, and (3) Generic SCSI Target Subsystem for Linux (aka SCST or iscsi-scst) 1.0.1.1 and earlier allow remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via (a) a long iSCSI Name string in an SCN message or (b) an invalid PDU.

CVSS 2.0 · 5.0 Medium EPSS 5.3% KEV · Not listed
Vendors
Arne Redlich \& Ross Walker Linux Redhat and 2 more
Products
Iscsitarget Linux Kernel Rhel Cluster Storage and 2 more
CVE-2010-2526

lvm2-cluster: insecurity when communicating between lvm2 and clvmd

The cluster logical volume manager daemon (clvmd) in lvm2-cluster in LVM2 before 2.02.72, as used in Red Hat Global File System (GFS) and other products, does not verify client credentials upon a socket connection, which allows local users to cause a denial of service (daemon exit or logical-volume change) or possibly have unspecified other impact via crafted control commands.

CVSS 2.0 · 4.6 Medium EPSS < 1% KEV · Not listed
Vendors
Heinz Mauelshagen Redhat
Products
Lvm2 Cluster Suite Enterprise Linux and 1 more
CVE-2010-3389

rgmanager: insecure library loading vulnerability

The (1) SAPDatabase and (2) SAPInstance scripts in OCF Resource Agents (aka resource-agents or cluster-agents) 1.0.3 in Linux-HA place a zero-length directory name in the LD_LIBRARY_PATH, which allows local users to gain privileges via a Trojan horse shared library in the current working directory.

CVSS 2.0 · 6.9 Medium EPSS < 1% KEV · Not listed
Vendors
Linux-ha Redhat
Products
Ocf Resource Agents Enterprise Linux Rhel Cluster
CVE-2011-0001

scsi-target-utils: double-free vulnerability leads to pre-authenticated crash

Double free vulnerability in the iscsi_rx_handler function (usr/iscsi/iscsid.c) in the tgt daemon (tgtd) in Linux SCSI target framework (tgt) before 1.0.14, aka scsi-target-utils, allows remote attackers to cause a denial of service (memory corruption and crash) and possibly execute arbitrary code via unknown vectors related to a buffer overflow during iscsi login. NOTE: some of these details are obtained from third party information.

CVSS 2.0 · 5.0 Medium EPSS 5.1% KEV · Not listed
Vendors
Redhat Zaal
Products
Enterprise Linux Rhel Cluster Storage Tgt
CVE-2011-0720

plone: unauthorized remote administrative access

Unspecified vulnerability in Plone 2.5 through 4.0, as used in Conga, luci, and possibly other products, allows remote attackers to obtain administrative access, read or create arbitrary content, and change the site skin via unknown vectors.

CVSS 2.0 · 7.5 High EPSS 3.2% KEV · Not listed
Vendors
Plone Redhat
Products
Plone Conga Luci and 1 more
CVE-2011-1948

plone: A reflected cross site scripting vulnerability

Cross-site scripting (XSS) vulnerability in Plone 4.1 and earlier allows remote attackers to inject arbitrary web script or HTML via a crafted URL.

CVSS 2.0 · 4.3 Medium EPSS 2.4% KEV · Not listed
Vendors
Plone Redhat
Products
Plone Rhel Cluster
CVE-2013-6492

piranha: web UI authentication bypass using POST requests

The Piranha Configuration Tool in Piranha 0.8.6 does not properly restrict access to webpages, which allows remote attackers to bypass authentication and read or modify the LVS configuration via an HTTP POST request.

CVSS 2.0 · 5.8 Medium EPSS 4.0% KEV · Not listed
Vendors
Redhat Ryan Ohara
Products
Enterprise Linux Rhel Cluster Piranha