EUVD-2017-16771

Malware in sbrugna...

CVE-2014-8940

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information names and details of projects by visiting the /update.log URI...

Design/Logic Flaw

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information names and details of projects by visiting the /update.log URI...

CVE-2014-8940

The CVE-2014-8940 entry affects Lexiglot (a PHP-based translation platform). The vulnerability is an information disclosure allowing remote attackers to obtain names and details of projects by accessing the /update.log URI, with impact described as exposure of limited data (names and project deta...

CVE-2014-8940: Exposure of Sensitive Information to an Unauthorized Actor

Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information names and details of projects by visiting the /update.log URI...

CVE-2019-11230: Improper Link Resolution Before File Access

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink. The next time the product attempts to write to the log file, the target of the symlink is renamed. This defect can be exploited to rename...

CVE-2017-7796

On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to this file is supplied at the command line to the updater and could be used in concert with another local exploit to delete a different file...

CVE-2017-7796

On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to this file is supplied at the command line to the updater and could be used in concert with another local exploit to delete a different file...

CVE-2017-7796: Improper Input Validation

On Windows systems, the logger run by the Windows updater deletes the file "update.log" before it runs in order to write a new log of that name. The path to this file is supplied at the command line to the updater and could be used in concert with another local exploit to delete a different file...

Mozilla Firefox for Windows Arbitrary File Deletion Vulnerability

Mozilla Firefox for Windows is an open source web browser for the Windows platform from the Mozilla Foundation in the U.S. Firefox ESR for Windows is an extended support version of Firefox for the Windows platform. A security vulnerability exists in previous versions of Mozilla Firefox 55 for...