Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2014-4040

powerpc-utils: snap creates archives with fstab and yaboot.conf which may expose certain passwords

snap in powerpc-utils 1.2.20 produces an archive with fstab and yaboot.conf files potentially containing cleartext passwords, and lacks a warning about reviewing this archive to detect included passwords, which might allow remote attackers to obtain sensitive information by leveraging access to a technical-support data stream.

CVSS 2.0 · 5.0 Medium EPSS 1.8% KEV · Not listed
Vendors
Powerpc-utils Project Redhat
Products
Powerpc-utils Enterprise Linux
CVE-2014-8165

powerpc-utils-python: arbitrary code execution due to unpickling untrusted input

scripts/amsvis/powerpcAMS/amsnet.py in powerpc-utils-python uses the pickle Python module unsafely, which allows remote attackers to execute arbitrary code via a crafted serialized object.

CVSS 2.0 · 10.0 Critical EPSS 2.8% KEV · Not listed
Vendors
Powerpc-utils Project Redhat
Products
Powerpc-utils Enterprise Linux