CVE-2017-20145 Tecrail Responsive Filemanger path traversal

A vulnerability was found in Tecrail Responsive Filemanger up to 9.10.x and classified as critical. The manipulation leads to path traversal. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 9.11.0 is able to address this issu...

CVE-2022-20145

In startLegacyVpnPrivileged of Vpn.java, there is a possible way to retrieve VPN credentials due to a protocol downgrade attack. This could lead to remote escalation of privilege if a malicious Wi-Fi AP is used, with no additional execution privileges needed. User interaction is not needed for...

CVE-2022-20145

Android CVE-2022-20145 exposes VPN credentials via a downgrade in Vpn.java: startLegacyVpnPrivileged in Android 11, enabling remote privilege escalation when connected to a malicious Wi‑Fi AP and requiring no user interaction. Affected product: Android (Android-11) framework component; vulnerabil...

CVE-2022-20145

creationtimestamp| type| source ---|---|--- 2022-06-08 11:51:16+00:00| seen| https://t.me/truesecator/3038 2022-06-11 09:56:29+00:00| seen| https://t.me/itsecnews/791...

CVE-2021-20145

creationtimestamp| type| source ---|---|--- 2021-12-09 18:24:06+00:00| seen| https://t.me/cibsecurity/33699...

CVE-2021-20145

Gryphon Tower routers are affected by CVE-2021-20145 due to an unprotected OpenVPN configuration file. The root cause is configuration data left accessible, which can grant an attacker access to the Gryphon homebound VPN network and expose LAN interfaces of other users’ devices sharing the same s...

CVE-2019-20145

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.4 through 12.6.1. It has Incorrect Access Control...

CVE-2019-20145

An issue was discovered in GitLab Community Edition CE and Enterprise Edition EE 11.4 through 12.6.1. It has Incorrect Access Control...

CVE-2019-20145

CVE-2019-20145 affects GitLab Community Edition (CE) and Enterprise Edition (EE) 11.4 through 12.6.1 with an incorrect access control vulnerability. Connected sources describe an impact where an attacker could commit and post review content to a locked merge request (CNVD-2020-03844). Mitigation ...

Fedora 29 : mosquitto (2018-f80b495582)

Update to new upstream version 1.5.5 rhbz1660413, rhbz1660414 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

Fedora 28 : mosquitto (2018-5acdf115df)

Update to new upstream version 1.5.5 rhbz1660413, rhbz1660414 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and format it as much as possible without introducing...

CVE-2018-20145

Eclipse Mosquitto 1.5.x before 1.5.5 allows ACL bypass: if the option perlistenersettings was set to true, and the default listener was in use, and the default listener specified an aclfile, then the acl file was being ignored...

CVE-2018-20145

CVE-2018-20145: Eclipse Mosquitto 1.5.x before 1.5.5 is affected. When per_listener_settings is true and the default listener is used with an acl_file configured, the ACL file is ignored, constituting an ACL bypass risk. Affected software: mosquitto 1.5.x prior to 1.5.5. Root cause: default-liste...

CVE-2020-20145

CVE-2020-20145 is a rejected reservation duplicate and should reference CVE-2019-14834.