47 matches found
Nagios XI 代码问题漏洞
Nagios is an open source, free network monitoring tool from Nagios, Inc. NagiosXI in version 5.8.4 has a server-side request forgery vulnerability, which stems from the product's failure to properly validate user input and could be exploited by an authenticated attacker to access internal resourc...
Linux kernel memory leak vulnerability (CNVD-2021-19430)
The Linux kernel is a computer operating system kernel written in C and assembly language, compliant with the POSIX standard, and distributed under the GNU General Public License. A memory leak vulnerability exists in romfsdevread in fs/romfs/storage.c in Linux kernel versions prior to 5.8.4. An...
WordPress AdRotate plugin <= 5.8.3 - Authenticated SQL Injection (SQLi) vulnerability
Authenticated SQL Injection SQLi vulnerability found by Nguyen Anh Tien in WordPress AdRotate plugin versions = 5.8.3. Solution Update the WordPress AdRotate plugin to the latest available version at least 5.8.4...
security flaw
Race condition in the rmtree function in File::Path.pm in Perl before 5.8.4 allows local users to create arbitrary setuid binaries in the tree being deleted, a different vulnerability than CVE-2004-0452...
[SECURITY] [DSA 696-1] New perl packages fix privilege escalation
-------------------------------------------------------------------------- Debian Security Advisory DSA 696-1 [email protected] http://www.debian.org/security/ Martin Schulze March 22nd, 2005 http://www.debian.org/security/faq -...
CVE-2004-0452
CVE-2004-0452 : Race condition in File::Path::rmtree in Perl 5.6.1 and 5.8.4 sets world-write permissions, enabling local users to delete arbitrary files/directories and potentially read them via a symlink attack. This is tied to the Perl File::Path module and the rmtree operation. No explicit fi...