Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 42

Export CSV
CVE-2013-4419

libguestfs: insecure temporary directory handling for guestfish's network socket

The guestfish command in libguestfs 1.20.12, 1.22.7, and earlier, when using the --remote or --listen option, does not properly check the ownership of /tmp/.guestfish-$UID/ when creating a temporary socket file in this directory, which allows local users to write to the socket and execute arbitrary commands by creating /tmp/.guestfish-$UID/ in advance.

CVSS 2.0 · 6.8 Medium EPSS < 1% KEV · Not listed
Vendors
Libguestfs Novell Redhat and 1 more
Products
Libguestfs Suse Linux Enterprise Server Enterprise Linux and 1 more
CVE-2014-1483

Mozilla: Information disclosure with *FromPoint on iframes (MFSA 2014-05)

Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint functions.

CVSS 2.0 · 5.0 Medium EPSS 2.4% KEV · Not listed
Vendors
Canonical Mozilla Opensuse and 2 more
Products
Ubuntu Linux Firefox Seamonkey and 5 more