CVE-2019-15703

creationtimestamp| type| source ---|---|--- 2026-07-22 09:15:43+00:00| seen| https://gist.github.com/shino/5cefdef6d36283f50795e32ffcf1a51d...

EUVD-2022-29254

Malicious code in bioql PyPI...

CVE-2022-24358

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Design/Logic Flaw

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader 11.1.0.52543. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

CVE-2022-24358

CVE-2022-24358 affects Foxit PDF Reader 11.1.0.52543. The flaw lies in the handling of Doc objects: by performing JavaScript actions, an attacker can trigger a read past the end of an allocated buffer, enabling arbitrary code execution in the context of the current process. User interaction is re...

denr.gov.ph Cross Site Scripting vulnerability OBB-1979673

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Affected Website:| denr.gov.ph ---|--- Open Bug Bounty...

CVE-2020-15703

CVE-2020-15703 affects aptdaemon: there is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, letting aptd read a file as root; with a symlink, an error is produced if the file exists, otherwise no error, enabling...

CVE-2020-15703 aptdaemon allows unprivileged users to test for the presence of local files via the transaction Locale property

There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an...

CVE-2020-15703

creationtimestamp| type| source ---|---|--- 2020-10-28 13:20:10+00:00| seen| https://t.me/CyberSecurityTechnologies/1997 2020-11-01 13:43:38+00:00| seen| https://t.me/cibsecurity/15756...

CVE-2020-15703

There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an...

UBUNTU-CVE-2020-15703

There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd read a file as root. Having a symlink in place results in an error message if the file exists, and no error otherwise. This way an...

org.apache.nifi:nifi-cluster-authorization-provider (0.2.1), org.apache.nifi:nifi-framework-cluster (0.2.1) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.2.1)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.2.1 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.4.0), org.apache.nifi:nifi-framework-cluster (0.4.0) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.4.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.4.0 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.7.3), org.apache.nifi:nifi-framework-cluster (0.7.3) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.7.3)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.7.3 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.7.4), org.apache.nifi:nifi-framework-cluster (0.7.4) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.7.4)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.7.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.7.4 -...

org.apache.nifi.minifi:minifi-c2-assembly (>=0.2.0, <=0.3.0), org.apache.nifi.minifi:minifi-c2-provider-nifi-rest (>=0.2.0, <=0.3.0) +16 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (>=1.0.0-beta, <=1.4.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version =1.0.0-beta, =0.2.0, =0.2.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.0.0-beta, =1.2.0, =1.2.0, =1.4.0 and more Source cves: CVE-2017-15703 Source advisory:...

org.apache.nifi:nifi-cluster-authorization-provider (0.3.0), org.apache.nifi:nifi-framework-cluster (0.3.0) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.3.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.3.0 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.7.1), org.apache.nifi:nifi-framework-cluster (0.7.1) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.7.1)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.7.1 -...

org.apache.nifi:nifi-cluster-authorization-provider (0.6.0), org.apache.nifi:nifi-framework-cluster (0.6.0) +6 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.6.0)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi:nifi-cluster-authorization-provider 0.6.0 -...

org.apache.nifi.minifi:minifi-framework-core (0.0.1), org.apache.nifi.minifi:minifi-framework-nar (0.0.1) +11 more potentially affected by CVE-2017-15703 via org.apache.nifi:nifi-framework-cluster-protocol (0.6.1)

org.apache.nifi:nifi-framework-cluster-protocol MAVEN version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.nifi:nifi-framework-cluster-protocol and may be impacted: - org.apache.nifi.minifi:minifi-framework-core 0.0.1 -...