Vulnerability fixed in Apple XCode

Apple has fixed a vulnerability in XCode. A malicious could potentially exploit the vulnerability to gain access to arbitrary files and thus sensitive data. The malicious party must entice the victim to install a malicious application. -= Apple =- Apple has made updates available for XCode to fix...

Apple Xcode 安全漏洞

Apple Xcode is an integrated development environment provided by Apple for developers to develop applications for Mac OS X and iOS. Apple Xcode 12.4 contains a security vulnerability that could be exploited by attackers to access arbitrary files on the host device...

Race condition

Jenkins 2.275 and LTS 2.263.2 allows reading arbitrary files using the file browser for workspaces and archived artifacts due to a time-of-check to time-of-use TOCTOU race condition...

Cloudbees Jenkins 安全漏洞

Jenkins is an open source continuous integration tool written in Java , mainly used for continuous , automated build/test software projects , monitor the operation of external tasks . A TOCTOU competitive condition vulnerability exists in Jenkins 2.275, LTS 2.263.2. An attacker can exploit this...

About the security content of Xcode 12.4

About the security content of Xcode 12.4 This document describes the security content of Xcode 12.4. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available...

PT-2021-14658 · Jenkins · Jenkins

Name of the Vulnerable Software and Affected Versions: Jenkins versions 2.275 through 2.275 Jenkins LTS versions 2.263.2 through 2.263.2 Description: The issue is caused by a time-of-check to time-of-use TOCTOU race condition, allowing attackers to read arbitrary files using the file browser for...

VIVOTEK Network Camera Directory Traversal (CVE-2017-9829)

A directory traversal vulnerability exists in VIVOTEK Network Cameras. Successful exploitation of this vulnerability could allow an attacker to access arbitrary files on the affected system...

Binary Vulnerability in Avira Antivirus

Avira AntiVirus is a suite of antivirus programs. A binary vulnerability exists in Avira Antivirus. An attacker can exploit the vulnerability to write to arbitrary files with system privileges...

IBM AIX Access Control Error Vulnerability

IBM AIX is an open standards-based UNIX operating system developed by IBM for the IBM Power architecture. An Access Control Error vulnerability exists in IBM AIX 7.1, 7.2 and AIX VIOS 3.1 that allows a local user to create arbitrary files in any directory by exploiting a vulnerability in the...

CVE-2020-4887

IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory. IBM X-Force ID: 190911...

Command injection

IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory. IBM X-Force ID: 190911...

CVE-2020-4887

IBM AIX 7.1, 7.2 and AIX VIOS 3.1 could allow a local user to exploit a vulnerability in the gencore user command to create arbitrary files in any directory. IBM X-Force ID: 190911...

多款 Cisco SD-WAN 产品输入验证错误漏洞

The Cisco SD-WAN vEdge is a router from Cisco, Inc. that provides basic WAN and security and multi-cloud capabilities for Cisco SD-WAN solutions. This device provides basic WAN, security, and multi-cloud capabilities for Cisco SD-WAN solutions.Cisco SD-WAN vManage is software from Cisco that...

AIX 7.1 TL 5 : gencore (IJ28825)

The AIX gencore user command may be exploited to create arbitrary files in any directory. CVE-2020-4887 C Tenable Network Security, Inc. The text in the description was extracted from AIX Security Advisory gencoreadvisory.asc. include'compat.inc'; if description scriptid145097; scriptversion"1.6"...

Vulnerability in gencore affects AIX,Vulnerability in gencore affects VIOS

IBM SECURITY ADVISORY First Issued: Tue Jan 19 16:15:13 CST 2021 |Updated: Tue Mar 30 09:09:39 CDT 2021 |Update: iFix now provided for AIX 7200-04-03 and VIOS 3.1.1.30. The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/gencoreadvisory.asc...

CVE-2020-35749

Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...

Directory traversal

Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...

CVE-2020-35749

Directory traversal vulnerability in class-simplejobboardresumedownloadhandler.php in the Simple Board Job plugin 2.9.3 and earlier for WordPress allows remote attackers to read arbitrary files via the sjbfile parameter to wp-admin/post.php...

Information Disclosure

Jenkins is vulnerable to information disclosure. The vulnerability allows any user to read arbitrary files using the file browser for workspaces and archived artifacts by following symlinks...

CVE-2021-1258

A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read arbitrary files on the underlying operating system OS of an affected device. The vulnerability is due to insufficient file permission...