Show filters
655 Total Results
Displaying 21-30 of 655
Sort by:
Attacker Value
Unknown
CVE-2016-5759
Disclosure Date: September 08, 2017 (last updated November 08, 2023)
The mkdumprd script called "dracut" in the current working directory "." allows local users to trick the administrator into executing code as root.
0
Attacker Value
Unknown
CVE-2015-0785
Disclosure Date: August 09, 2017 (last updated November 08, 2023)
com.novell.zenworks.inventory.rtr.actionclasses.wcreports in Novell ZENworks Configuration Management (ZCM) allows remote attackers to read arbitrary folders via the dirname variable.
0
Attacker Value
Unknown
CVE-2015-0781
Disclosure Date: August 09, 2017 (last updated November 08, 2023)
Directory traversal vulnerability in the doPost method of the Rtrlet class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to upload and execute arbitrary files via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-0780
Disclosure Date: August 09, 2017 (last updated November 08, 2023)
SQL injection vulnerability in the GetReRequestData method of the GetStoredResult class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-0786
Disclosure Date: August 09, 2017 (last updated November 08, 2023)
Stack-based buffer overflow in the logging functionality in the Preboot Policy service in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary code via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-0782
Disclosure Date: August 09, 2017 (last updated November 08, 2023)
SQL injection vulnerability in the ScheduleQuery method of the schedule class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
0
Attacker Value
Unknown
CVE-2015-0784
Disclosure Date: August 09, 2017 (last updated November 08, 2023)
Rtrlet.class in Novell ZENworks Configuration Management (ZCM) allows remote attackers to obtain Session IDs of logged in users via a value of ShowLogins for the maintenance variable.
0
Attacker Value
Unknown
CVE-2015-0783
Disclosure Date: August 09, 2017 (last updated November 08, 2023)
The FileViewer class in Novell ZENworks Configuration Management (ZCM) allows remote authenticated users to read arbitrary files via the filename variable.
0
Attacker Value
Unknown
CVE-2015-5219
Disclosure Date: July 21, 2017 (last updated November 26, 2024)
The ULOGTOD function in ntp.d in SNTP before 4.2.7p366 does not properly perform type conversions from a precision value to a double, which allows remote attackers to cause a denial of service (infinite loop) via a crafted NTP packet.
0
Attacker Value
Unknown
CVE-2017-8932
Disclosure Date: July 06, 2017 (last updated November 08, 2023)
A bug in the standard library ScalarMult implementation of curve P-256 for amd64 architectures in Go before 1.7.6 and 1.8.x before 1.8.2 causes incorrect results to be generated for specific input points. An adaptive attack can be mounted to progressively extract the scalar input to ScalarMult by submitting crafted points and observing failures to the derive correct output. This leads to a full key recovery attack against static ECDH, as used in popular JWT libraries.
0
