35960 matches found
Amazon Linux 2 : cpio (ALAS-2024-2489)
The version of cpio installed on the remote host is prior to 2.12-11. It is, therefore, affected by a vulnerability as referenced in the ALAS2-2024-2489 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a fil...
Important: cpio
Issue Overview: cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2015-1197 Affected Packages: cpio Issue Correction: Run dnf update cpio --releasever 2023.3.20240304 or dnf update --advisory...
Important: cpio
Issue Overview: cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2015-1197 Affected Packages: cpio Issue Correction: Run yum update cpio or yum update --advisory ALAS-2024-1925 to update your...
openSUSE: Security Advisory for python3 (SUSE-SU-2022:2357-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for squashfs (SUSE-SU-2023:4591-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE: Security Advisory for java (SUSE-SU-2023:4506-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Important: cpio
Issue Overview: cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2015-1197 Affected Packages: cpio Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ...
Important: cpio
Issue Overview: cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2015-1197 Affected Packages: cpio Note: This advisory is applicable to Amazon Linux 2 AL2 Core repository. Visit this FAQ...
CVE-2024-2015 ZhiCms mcontroller.php getindexdata sql injection
A vulnerability, which was classified as critical, has been found in ZhiCms 4.0. This issue affects the function getindexdata of the file app/index/controller/mcontroller.php. The manipulation of the argument key leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2024-2015
The CVE-2024-2015 entry concerns ZhiCms 4.0. The vulnerability is in the getindexdata function of app/index/controller/mcontroller.php, where manipulation of the key argument enables SQL injection. Exploitation can be performed remotely, and public disclosures exist (VDB-255269). Some connected s...
Path traversal
Debian's cpio contains a path traversal vulnerability. This issue was introduced by reverting CVE-2015-1197 patches which had caused a regression in --no-absolute-filenames. Upstream has since provided a proper fix to --no-absolute-filenames...
CVE-2015-9539
creationtimestamp| type| source ---|---|--- 2024-02-28 10:41:09+00:00| seen| https://t.me/ctinow/195304...
CVE-2015-9537
creationtimestamp| type| source ---|---|--- 2024-02-28 10:11:36+00:00| seen| https://t.me/ctinow/195256...
CVE-2015-7831
creationtimestamp| type| source ---|---|--- 2024-02-28 10:11:35+00:00| seen| https://t.me/ctinow/195255...
CVE-2015-6495
creationtimestamp| type| source ---|---|--- 2024-02-28 10:11:34+00:00| seen| https://t.me/ctinow/195254...
CVE-2015-1396
creationtimestamp| type| source ---|---|--- 2024-02-27 08:16:59+00:00| seen| Telegram/rzw340uvVboqwa91QfwVFdh29ojthZPfobgCWUQ6pht6fsgW...
CVE-2015-1419
creationtimestamp| type| source ---|---|--- 2024-02-26 21:22:43+00:00| published-proof-of-concept| https://t.me/BlackWolvesTeam/35 2025-10-07 21:02:37+00:00| seen| https://bsky.app/profile/beikokucyber.bsky.social/post/3m2mzldrfag2w...
CVE-2015-7810
creationtimestamp| type| source ---|---|--- 2024-02-26 14:42:06+00:00| seen| https://t.me/ctinow/193373...