Skip to content
OpenAdvisories

Archive

27 November 2018

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • High 7.7

    Security Advisory for Vulnerabilities in QTS

    Buffer Overflow vulnerability in NAS devices. QTS allows attackers to run arbitrary code. This issue affects: QNAP Systems Inc. QTS version 4.2.6 and prior versions on build 20180711; version 4.3.3 and prior versions on build 20180725; version 4.3.4 and prior…

  • High 8.8

    Arbitrary Command Execution in Hadoop

    In Apache Hadoop 2.7.4 to 2.7.6, the security fix for CVE-2016-6811 is incomplete. A user who can escalate to yarn user can possibly run arbitrary commands as root user.

  • High 7.5

    pam_access does not handle netmask matches correctly

    A incorrect variable in a SUSE specific patch for pam_access rule matching in PAM 1.3.0 in openSUSE Leap 15.0 and SUSE Linux Enterprise 15 could lead to pam_access rules not being applied (fail open).