105 matches found
CVE-2020-3760
CVE-2020-3760 affects Adobe Digital Editions versions 4.5.10 and below, where a command-injection flaw could lead to arbitrary code execution. Root cause: improper handling of input data enabling shell execution. Impact per sources: high-severity, with potential for full compromise of the affecte...
Adobe Digital Editions < 4.5.11 Multiple Vulnerabilities (APSB20-07)
The version of Adobe Digital Editions installed on the remote Windows host is prior to 4.5.11. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB20-07 advisory. - Adobe Digital Editions versions 4.5.10 and below have a command injection vulnerability. Successful...
Exploit for Exposure of Sensitive Information to an Unauthorized Actor in Redhat Cloudforms
CVE-2018-3760 Rails Asset Pipeline Directory Traversal Vuln...
CVE-2019-3760
The RSA Identity Governance and Lifecycle software and RSA Via Lifecycle and Governance products prior to 7.1.0 P08 contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated malicious user could potentially exploit this vulnerability to execute SQL commands on the back-e...
CVE-2019-3760
The CVE-2019-3760 entry concerns RSA Identity Governance and Lifecycle and RSA Via Lifecycle and Governance products prior to 7.1.0 P08, which contain a SQL Injection vulnerability in Workflow Architect. A remote authenticated attacker could exploit specially crafted input to execute SQL commands...
openSUSE Security Update : rubygem-sprockets (openSUSE-2019-542)
This update for rubygem-sprockets fixes the following issues : The following security vulnerability was addressed : - CVE-2018-3760: Fixed a path traversal issue in sprockets/server.rb:forbiddenrequest?, which allowed remote attackers to read arbitrary files bsc1098369 This update was imported fr...
Virtuozzo Linux Errata and Security Advisory 2018:3760 Important
Upstream security update. Follow RHSA-2018:3760 for details...
openSUSE: Security Advisory for rubygem-sprockets (openSUSE-SU-2018:2124-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...
Important: Red Hat Security Advisory: CloudForms 4.5.5 security, bug fix and enhancement update
An update is now available for CloudForms Management Engine 5.8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Ubuntu 14.04 LTS / 16.04 LTS : transfig vulnerability (USN-3760-1)
The remote Ubuntu 14.04 LTS / 16.04 LTS host has a package installed that is affected by a vulnerability as referenced in the USN-3760-1 advisory. It was discovered that transfig incorrectly handled certain FIG files. An attacker could possibly use this to execute arbitrary code. Tenable has...
Ruby on Rails 路径穿越与任意文件读取漏洞(CVE-2018-3760)分析
漏洞公告 该漏洞由安全研究人员 Orange Tsai发现。漏洞公告来自 https://groups.google.com/forum/!topic/rubyonrails-security/ftJ--l55fM There is an information leak vulnerability in Sprockets. This vulnerability has been assigned the CVE identifier CVE-2018-3760. Versions Affected: 4.0.0.beta7 and lower, 3.7.1 and lower,...
openSUSE Security Update : rubygem-sprockets (openSUSE-2018-773)
This update for rubygem-sprockets fixes the following issues : The following security vulnerability was addressed : - CVE-2018-3760: Fixed a path traversal issue in sprockets/server.rb:forbiddenrequest?, which allowed remote attackers to read arbitrary files bsc1098369 This update was imported fr...
Important: Red Hat Security Advisory: rh-ror50-rubygem-sprockets security update
An update for rh-ror50-rubygem-sprockets is now available for Red Hat Software Collections. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...
SUSE-SU-2018:1994-1 Security update for rubygem-sprockets
This update for rubygem-sprockets fixes the following issues: The following security vulnerability was addressed: - CVE-2018-3760: Fixed a path traversal issue in sprockets/server.rb:forbiddenrequest?, which allowed remote attackers to read arbitrary files bsc1098369...
[SECURITY] [DLA-1419-1] ruby-sprockets security update
Package : ruby-sprockets Version : 2.12.3-1+deb8u1 CVE IDs : CVE-2018-3760 Debian Bug : 901913 It was discovered that there was a discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker could take advantage of this flaw to read arbitrary files...
Debian DSA-4242-1 : ruby-sprockets - security update
Orange Tsai discovered a path traversal flaw in ruby-sprockets, a Rack-based asset packaging system. A remote attacker can take advantage of this flaw to read arbitrary files outside an application's root directory via specially crafted requests, when the Sprockets server is used in production. C...
[SECURITY] [DSA 4242-1] ruby-sprockets security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4242-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 09, 2018 https://www.debian.org/security/faq -...
[SECURITY] [DSA 4242-1] ruby-sprockets security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4242-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso July 09, 2018 https://www.debian.org/security/faq -...
openSUSE Security Update : rubygem-sprockets (openSUSE-2018-686)
This update for rubygem-sprockets fixes the following issues : The following security vulnerability was addressed : - CVE-2018-3760: Fixed a directory traversal issue in sprockets/server.rb:forbiddenrequest?, which allowed remote attackers to read arbitrary files via specially crafted requests...
openSUSE: Security Advisory for rubygem-sprockets (openSUSE-SU-2018:1854-1)
The remote host is missing an update for the Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...