29 matches found
CVE-2019-9485
CVE-2019-9485 affects GitLab Community and Enterprise Edition prior to specific fixed versions: before 11.6.10, before 11.7.6 (11.7.x), and before 11.8.1 (11.8.x). Root cause: insecure permissions. Impact is described as high (CVSS v3.0: 9.8; Confidentiality, Integrity, Availability all High). Re...
CVE-2014-9485
Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive...
CVE-2014-9485
Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive...
CVE-2014-9485
CVE-2014-9485 is a directory traversal vulnerability in the minizip component (miniunz.c: do_extract_currentfile) where minizip before 1.1-5 could allow writing to arbitrary files via a crafted ZIP entry. Affected software is the minizip/miniunz.c workflow; exploitation would enable an attacker t...
CVE-2014-9485
Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive...
CVE-2017-9485
The Comcast firmware on Cisco DPC3939 firmware version dpc3939-P20-18-v303r20421746-170221a-CMCST devices allows remote attackers to write arbitrary data to a known /var/tmp/sess pathname by leveraging the device's operation in UI dev mode...
ForeScout CounterACT SecureConnector agent is vulnerable to privilege escalation
Overview On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint by causing the SecureConnector agent to execute arbitrary code. Description On Windows endpoints, the...
