4019 matches found
ALPINE-CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...
CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...
Shack Forms Pro extension path traversal vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. Shack Forms Pro extension is used in one of the form creation plugin . A path traversal vulnerability exists in the Shack Forms Pro extension for...
The vulnerability of the ssedb_search_user_by_upn_res() function in the access control service for remote directories and the authentication mechanism sssd allows a intruder to gain unauthorized access to protected information.
The vulnerability of the ssedbsearchuserbyupnres function of the access control service for remote directories and the sssd authentication mechanism is related to insufficient validation of input data when querying the local cache that stores password hashes. Exploiting this vulnerability could...
UBUNTU-CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...
CVE-2019-4652
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...
CVE-2019-4652
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...
CVE-2019-4652
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...
DEBIAN-CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
Design/Logic Flaw
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
CVE-2013-1809
CVE-2013-1809 affects Gambas before 3.4.0. The issue arises from insecure temporary directories, allowing remote attackers to move or manipulate directory contents or perform symlink attacks. This is documented across multiple sources (NVD entry and related advisories). The provided materials des...
PYSEC-2019-253
Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval...
PYSEC-2019-253
Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval...
CVE-2012-0051
Tahoe-LAFS 1.9.0 fails to ensure integrity which allows remote attackers to corrupt mutable files or directories upon retrieval...
XML Entity Injection Vulnerability in zzzcms zzzphp Backend
zzzcms zzzphp is a content management system CMS. An XML entity injection vulnerability exists in the zzzcms zzzphp backend. An attacker can exploit the vulnerability to gain unauthorized access to files in arbitrary directories...
Low: Red Hat Security Advisory: sssd security, bug fix, and enhancement update
An update for sssd is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Low. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE...
Online Store System Path Traversal Vulnerability
Online Store System is an e-commerce system. A path traversal vulnerability exists in the Online Store System v1.0 release. The vulnerability arises from a failure of a network system or product to properly filter special elements in the path of a resource or file. An attacker could use this...