201 matches found
CVE-2019-14988
CVE-2019-14988 is a rejected/unused candidate; refer to CVE-2019-9512 for the active entry.
About the security content of SwiftNIO HTTP/2 1.5.0 - Apple Support
About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. Apple security documents reference...
h2o -- multiple HTTP/2 vulnerabilities
Jonathon Loomey of Netflix reports: HTTP/2 implementations do not robustly handle abnormal traffic and resource exhaustion Recently, a series of DoS attack vulnerabilities have been reported on a broad range of HTTP/2 stacks. Among the vulnerabilities, H2O is exposed to the following: CVE-2019-95...
About the security content of SwiftNIO HTTP/2 1.5.0
About the security content of SwiftNIO HTTP/2 1.5.0 This document describes the security content of SwiftNIO HTTP/2 1.5.0. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or...
py-twisted -- multiple vulnerabilities
Twisted developers reports: All HTTP clients in twisted.web.client now raise a ValueError when called with a method and/or URL that contain invalid characters. This mitigates CVE-2019-12387. Thanks to Alex Brasetvik for reporting this vulnerability. The HTTP/2 server implementation now enforces T...
openSUSE Security Update : rsync (openSUSE-2018-34)
This update for rsync fixes the several issues. These security issues were fixed : - CVE-2017-17434: The daemon in rsync did not check for fnamecmp filenames in the daemonfilterlist data structure in the recvfiles function in receiver.c and also did not apply the sanitizepaths protection mechanis...
Atlassian FishEye and Crucible mostActiveCommitters Information Disclosure (CVE-2017-9512)
An information disclosure vulnerability exists in Atlassian FishEye and Crucible. The vulnerability is due to a lack of permission check on mostActiveCommitters.do. A remote, unauthenticated attacker can exploit this vulnerability by sending a request to mostActiveCommitters.do...
CVE-2017-9512
CVE-2017-9512 affects Atlassian FishEye and Crucible prior to version 4.4.1. The vulnerability is an information disclosure in the mostActiveCommitters.do resource due to missing permission checks, allowing anonymous remote access to sensitive data such as committers’ email addresses. Connected s...
CVE-2017-9512
The mostActiveCommitters.do resource in Atlassian Fisheye and Crucible, before version 4.4.1 allows anonymous remote attackers to access sensitive information, for example email addresses of committers, as it lacked permission checks...
CVE-2016-9512
CVE-2016-9512 entry is rejected/not used and does not represent an active vulnerability.
SUSE SLED12 / SLES12 Security Update : rsync (SUSE-SU-2016:2151-1)
rsync was updated to fix one security issue. - CVE-2014-9512: rsync allowed remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path bsc915410. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...
SUSE SLES11 Security Update : rsync (SUSE-SU-2016:1866-1)
rsync was updated to fix one security issue. - CVE-2014-9512: rsync allowed remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path bsc915410. Note that Tenable Network Security has extracted the preceding description block directly from the SUSE...
SUSE-SU-2016:1866-1 Security update for rsync
rsync was updated to fix one security issue. - CVE-2014-9512: rsync allowed remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path bsc915410...
openSUSE Security Update : rsync (openSUSE-2016-764)
rsync was updated to fix one security issue. This security issue was fixed : - CVE-2014-9512: rsync allowed remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path boo915410. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text...
GLSA-201605-04 : rsync: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-201605-04 rsync: Multiple vulnerabilities Multiple vulnerabilities have been discovered in rsync. Please review the CVE identifiers referenced below for details. Impact : Remote attackers could write arbitrary files via symlink...
SUSE SLED11 / SLES11 Security Update : rsync (SUSE-SU-2016:0176-1)
This update for rsync fixes two security issues : - CVE-2014-8242: Checksum collisions leading to a denial of service bsc900914 - CVE-2014-9512: Malicious servers could send files outside of the transferred directory bsc915410 Note that Tenable Network Security has extracted the preceding...
CVE-2014-9512
rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path...
CVE-2014-9512
CVE-2014-9512 affects rsync 3.1.1, enabling a remote attacker to write arbitrary files via a symlink attack during synchronization. The vulnerability is caused by improper handling of symlinks in the transfer/path, allowing modification of files on the target host. Multiple connected sources refe...
