USN-4899-1 spamassassin vulnerability

Damian Lukowski discovered that SpamAssassin incorrectly handled certain CF files. If a user or automated system were tricked into using a specially- crafted CF file, a remote attacker could possibly run arbitrary code...

Debian DSA-4879-1 : spamassassin - security update

Damian Lukowski discovered a flaw in spamassassin, a Perl-based spam filter using text analysis. Malicious rule configuration files, possibly downloaded from an updates server, could execute arbitrary commands under multiple scenarios. C Tenable Network Security, Inc. The descriptive text and...

FreeBSD : spamassassin -- Malicious rule configuration (.cf) files can be configured to run system commands (ec04f3d0-8cd9-11eb-bb9f-206a8a720317)

The Apache SpamAssassin project reports : Apache SpamAssassin 3.4.5 was recently released 1, and fixes an issue of security note where malicious rule configuration .cf files can be configured to run system commands. In Apache SpamAssassin before 3.4.5, exploits can be injected in a number of...

Mail.ru: Development configurations file with a sensitive data exposure could be leads to take down the social media accounts and the DB

Configuration files were accessible at tanks.mail.ru leaking configuration information, including database accounts...

Ovarro TWinSoft 安全漏洞

Ovarro TWinSoft is an application platform from Ovarro Germany. One that can be used anywhere, anytime to access network functions using its mobile devices and PCs. Ovarro TWinSoft suffers from a security vulnerability that stems from TBox's proprietary Modbus file access feature that allows an...

CVE-2020-27290

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files...

CVE-2020-27282

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files...

CVE-2020-27282

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files...

Information disclosure

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files...

CVE-2020-27290

The CVE-2020-27290 case concerns Hamilton Medical AG T1-Ventilator, affected in versions 2.2.3 and prior. The vulnerability is an information disclosure flaw enabling attackers with physical access to the device’s configuration interface logs to obtain valid checksums for tampered configuration f...

CVE-2020-27290

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an information disclosure vulnerability in the ventilator allows attackers with physical access to the configuration interface's logs to get valid checksums for tampered configuration files...

CVE-2020-27282

In Hamilton Medical AG,T1-Ventillator versions 2.2.3 and prior, an XML validation vulnerability in the ventilator allows privileged attackers with physical access to render the device persistently unusable by uploading specially crafted configuration files...

CVE-2020-8357

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations...

CVE-2020-8357

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations...

CVE-2020-8357

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations...

Denial of service

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations...

CVE-2020-8357

CVE-2020-8357 describes a denial-of-service vulnerability in Lenovo PCManager prior to version 3.0.200.2042. The issue could allow configuration files to be written to non-standard locations, indicating a potential file-write abuse that could disrupt normal operation. The connected documents prov...

CVE-2020-8357

A denial of service vulnerability was reported in Lenovo PCManager, prior to version 3.0.200.2042, that could allow configuration files to be written to non-standard locations...

Lenovo Pcmanager 安全漏洞

Lenovo Lenovo Pcmanager Lenovo Computer Manager is a software program from Lenovo, China that allows comprehensive management of Pc devices. A security vulnerability exists in Lenovo PCManager prior to version 3.0.200.2042, which stems from a denial of service vulnerability that allows...

[SECURITY] Fedora 33 Update: containers-common-1-4.fc33

This package contains common configuration files and documentation for cont ainer tools ecosystem, such as Podman, Buildah and Skopeo. It is required because the most of configuration files and docs come from p rojects which are vendored into Podman, Buildah, Skopeo, etc. but they are not pack ag...