328 matches found
openSUSE 15 Security Update : EternalTerminal (openSUSE-SU-2023:0041-1)
The remote openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2023:0041-1 advisory. - In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp. CVE-2022-48257 - In Eternal Terminal 6.2.1, etserver a...
PT-2023-2376 · Liblouis +7 · Liblouis +7
Name of the Vulnerable Software and Affected Versions: Liblouis version 3.24.0 Description: The issue is related to a buffer overflow vulnerability in the lou logFile function of the Liblouis translator, which is caused by copying a buffer without checking the size of the input data. This can be...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
Code injection
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-48257
CVE-2022-48257 affects EternalTerminal
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-48257
In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...
CVE-2022-40715
An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...
CVE-2022-40715
An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...
Path traversal
An issue was discovered in NOKIA 1350OMS R14.2. An Absolute Path Traversal vulnerability exists for a specific endpoint via the logfile parameter, allowing a remote authenticated attacker to read files on the filesystem arbitrarily...
Exploit for CVE-2121-44228
CVE-2021–44228 Demo 1. Introduction to CVE-2021–44228 At t...
GHSA-MJWW-VQQW-V78Q WSO2 Carbon directory traversal vulnerability
Directory traversal vulnerability in the LogViewer Admin Service in WSO2 Carbon 4.4.5 allows remote authenticated administrators to read arbitrary files via a .. dot dot in the logFile parameter to downloadgz-ajaxprocessor.jsp...
Directory Traversal
Overview Affected versions of this package are vulnerable to Directory Traversal via the logFile parameter in the LogViewer Admin Service. An attacker can read arbitrary files by manipulating the input to include directory traversal sequences such as .. dot dot. This is only exploitable if the...
CVE-2022-28774
Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted...
CVE-2022-28774
Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted...
CVE-2022-28774
Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted...
Authentication flaw
Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted...
CVE-2022-28774
Under certain conditions, the SAP Host Agent logfile shows information which would otherwise be restricted...
PT-2022-19223 · Sap · Sap Host Agent
Name of the Vulnerable Software and Affected Versions: SAP Host Agent affected versions not specified Description: The issue concerns the SAP Host Agent logfile, which under certain conditions, displays information that would otherwise be restricted. Recommendations: At the moment, there is no...