Most recent entries from all

bdu:2017-01262

certfr-2017-avi-165 — Une vulnérabilité a été corrigée dans Samba. Elle permet à un attaquant de provoquer une ex…

certfr-2017-avi-165

cnvd-2017-07432

EUVD-2026-256332

fkie_cve-2017-7494

Samba since version 3.5.0 and before 4.6.4, 4.5.10 and 4.4.14 is vulnerable to remote code execution vulnerability, allowing a malicious client to upload a shared library to a writable share, and then cause the server to load and execute it.

GHSA-453q-q3mp-9cq4

gsd-2017-7494

ICSA-17-180-02 — Schneider Electric U.motion Builder (Update A)

Unauthenticated users can use calls to various paths in order to perform arbitrary SQL statements against the underlying database.CVE-2017-7973 has been assigned to this vulnerability. A CVSS v3 base score of 9.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The vulnerability exists within processing of track_import_export.php. The underlying SQLite database query is subject to SQL injection on the object_id input parameter.CVE-2018-7765 has been assigned to this vulnerability. A CVSS v3 base score of 8.8 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H). The vulnerability exists within processing of track_getdata.php. The underlying SQLite database query is subject to SQL injection on the id input parameter.CVE-2018-7766 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L). The vulnerability exists within processing of editobject.php. The underlying SQLite database query is subject to SQL injection on the type input parameter.CVE-2018-7767 has been assigned to this vulnerability. A CVSS v3 base score of 6.3 has been assigned; the CVSS vector string is (AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L). The vulnerability exists within processing of loadtemplate.php. The underlying SQLite database query is subject to SQL injection on the tpl input parameter.CVE-2018-7768 has been assigned to this vulnerability. A CVSS v3…

RHSA-2017:1270 — Red Hat Security Advisory: samba security update

samba: Loading shared modules from any path in the system leading to RCE (SambaCry)

RHSA-2017:1271 — Red Hat Security Advisory: samba4 security update

samba: Loading shared modules from any path in the system leading to RCE (SambaCry)

SEVD-2018-095-01 — Security Notification - U.motion Builder software

Schneider Electric is aware of an exploit that targets Schneider Electric’s U.motion Builder software. It is imperative customers cease using U.motion Builder software and remove it from their systems immediately.

SUSE-SU-2017:1391-1 — Security update for samba

Security update for samba

UBUNTU-CVE-2017-7494

Affected: Ubuntu:14.04:LTS: samba, Ubuntu:16.04:LTS: samba