CVE-2022-39845

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.6.4.22074 allows local attackers to delete arbitrary directory using directory junction...

SAMSUNG Smart Switch PC 安全漏洞

SAMSUNG Smart Switch PC is a Windows software from Samsung South Korea. It is used for data transfer. A security vulnerability exists in SAMSUNG Smart Switch PC prior to version 4.3.22083, which stems from an improper validation of its integrity check that could be exploited by a local attacker t...

SAMSUNG Kies 安全漏洞

SAMSUNG Kies is an application from the South Korean company Samsung SAMSUNG for data synchronization between devices. The program is mainly used to connect Samsung devices to a computer and supports features such as file management and device updates. A security vulnerability exists in SAMSUNG...

PT-2022-23153 · Unknown · Growthbook

Name of the Vulnerable Software and Affected Versions: GrowthBook versions prior to 2022-08-29 Description: GrowthBook is an open-source platform for feature flagging and A/B testing. With some self-hosted configurations, attackers can register new accounts and upload files to arbitrary directori...

OESA-2022-1875 rsync security update

Rsync is an open source utility that provides fast incremental file transfer.It uses the "rsync algorithm" which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files ar...

HCL Technologies VersionVault Express Information Disclosure Vulnerability

HCL Technologies VersionVault Express is an intuitive side-by-side comparison viewer from HCL Technologies, India. to easily compare files and directories in it. An information disclosure vulnerability exists in HCL Technologies VersionVault Express version 2.0.1, version 2.1.0, which stems from...

Dell Container Storage Modules Path Traversal Vulnerability

Dell Container Storage Modules is a set of modules from Dell, Inc. Dell Container Storage Modules version 1.2 contains a path traversal vulnerability that could be exploited by a remote authenticated attacker with low privileges to cause unintentional access to paths outside of restricted...

Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-25020

Summary IBM TRIRIGA Application Platform discloses CVE-2020-25020 Vulnerability Details CVEID:CVE-2020-25020 DESCRIPTION: MPXJ could allow a remote attacker to obtain sensitive information, caused by improper handling of XML external entity XXE declarations by the GanttProjectReader and...

CVE-2022-36552: Files or Directories Accessible to External Parties

Tenda AC6AC1200 v5.0 Firmware v02.03.01.114 and below contains an issue in the component /cgi-bin/DownloadFlash which allows attackers to steal all data such as source code and system files via a crafted GET request...

AZL-10763 CVE-2022-0358 affecting package qemu for versions less than 6.2.0-5

A flaw was found in the QEMU virtio-fs shared file system daemon virtiofsd implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certa...

CVE-2022-0358

A flaw was found in the QEMU virtio-fs shared file system daemon virtiofsd implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files in the directories shared by virtio-fs with unintended group ownership in a scenario where a directory is SGID to a certa...

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp.

...

GHSA-3W4V-RVC4-2XPW Keycloak has Files or Directories Accessible to External Parties

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available...

DEBIAN-CVE-2021-3864

A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a...

UBUNTU-CVE-2021-3864

A flaw was found in the way the dumpable flag setting was handled when certain SUID binaries executed its descendants. The prerequisite is a SUID binary that sets real UID equal to effective UID, and real GID equal to effective GID. The descendant will then have a dumpable value set to 1. As a...

CVE-2021-3864

CVE-2021-3864 is a local privilege-escalation flaw in the Linux kernel involving how the dumpable flag is handled for descendants of certain SUID binaries. If a SUID binary sets real UID equal to effective UID and real GID equal to effective GID, the descendant’s dumpable value can become 1, so a...

Updated canna packages fix security vulnerability

Move UNIX socket dir from /tmp to /run to avoid local attackers being able to place bogus directories in its stead. CVE-2022-21950...

rsync: remote arbitrary files write inside the directories of connecting peers

A flaw was found in rsync that is triggered by a victim rsync user/client connecting to a malicious rsync server. The server can copy and overwrite arbitrary files in the client's rsync target directory and subdirectories. This flaw allows a malicious server, or in some cases, another attacker wh...

rsync: remote arbitrary files write inside the directories of connecting peers

A flaw was found in rsync that is triggered by a victim rsync user/client connecting to a malicious rsync server. The server can copy and overwrite arbitrary files in the client's rsync target directory and subdirectories. This flaw allows a malicious server, or in some cases, another attacker wh...

AZL-10638 CVE-2021-3997 affecting package systemd for versions less than 250.3-21

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...