CVE-2017-18385

cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...

CVE-2017-18385

cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...

Design/Logic Flaw

cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...

CVE-2017-18385

cPanel before 68.0.15 allows unprivileged users to access restricted directories during account restores SEC-311...

CVE-2017-18385

CVE-2017-18385 affects cPanel before 68.0.15, where unprivileged users can access restricted directories during account restores (SEC-311). The issue is documented across multiple sources (cPanel changelog references and Red Hat/CNVD listings). Practical impact: restricted directory exposure duri...

CVE-2018-20939

cPanel before 68.0.27 allows a user to discover contents of directories that are not owned by that user by leveraging backups SEC-339...

Sigil Path Traversal Vulnerability

Sigil is an open source multi-platform ebook editor. Sigil suffers from a path traversal vulnerability. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker could use this vulnerability to access...

icedtea-web path traversal vulnerability

icedtea-web is an open source implementation of JSR-56 Java Network Launching Protocol and API. A path traversal vulnerability in icedtea-web versions 1.7.2 and earlier and 1.8.2 and earlier, which stems from a failure of a network system or product to properly filter for special elements in the...

yard path traversal vulnerability

yard is a documentation generation tool for the Ruby programming language. A path traversal vulnerability exists in versions of yard prior to 0.9.20. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An...

Arbitrary Code Execution

bubblewrap is vulnerable to arbitrary code execution. A misuse of temporary directories in /tmp as a mount point allows a local attacker to exploit the vulnerability to execute arbitrary code or prevent other users from executing bubblewrap...

kubernetes security update

1.12.7-1.2.3 - OLCNE-494 CVE-2019-11244 fix CVE-2019-11244: 'kubectl --http-cache= ' - creates world-writeable cached schema files 1.12.7-1.1.3 - OCNE-372 kubeadm: properly umount dirs in /var/lib/kubelet...

CVE-2019-5603

In FreeBSD 12.0-STABLE before r350261, 12.0-RELEASE before 12.0-RELEASE-p8, 11.3-STABLE before r350263, 11.3-RELEASE before 11.3-RELEASE-p1, and 11.2-RELEASE before 11.2-RELEASE-p12, system calls operating on file descriptors as part of mqueuefs did not properly release the reference allowing a...

LINAGORA hublin web-view renderer path traversal vulnerability

LINAGORA hublin is an open source video conferencing solution based on WebRTC. web-view renderer is one of the renderers. A path traversal vulnerability exists in the web-view renderer in LINAGORA hublin. The vulnerability stems from a failure of a network system or product to properly filter...

EulerOS 2.0 SP8 : bubblewrap (EulerOS-SA-2019-1762)

According to the version of the bubblewrap package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - bubblewrap.c in Bubblewrap before 0.3.3 misuses temporary directories in /tmp as a mount point. In some particular configurations related to...

Security update for neovim (important)

openSUSE Security Update: Security update for neovim Announcement ID: openSUSE-SU-2019:1796-1 Rating: important References: 1137443 Cross-References: CVE-2019-12735 Affected Products: openSUSE Backports SLE-15 An update that fixes one vulnerability is now available. Description: This update for...

National Security Agency Ghidra Path Traversal Vulnerability

National Security Agency Ghidra is a software reverse engineering SRE framework for the National Security Agency NSA. A path traversal vulnerability exists in National Security Agency Ghidra versions 9.0.4 and earlier. The vulnerability stems from a failure of a networked system or product to...

Shellsum - A Defense Tool - Detect Web Shells In Local Directories Via Md5Sum

A defense tool - detect web shells in local directories via md5sum Features Fast speed Lightweight Big database Tabled output Usages Install git clone https://github.com/ManhNho/shellsum.git chmod 755 -R shellsum/ cd shellsum/ pip install -r requirements.txt Run python shellsum.py ToDo Smooth...

PT-2019-17080 · Ibm · Ibm Maximo Asset Management

Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6 Description: The issue allows a remote attacker to traverse directories on the system by sending a specially-crafted URL request containing dot dot sequences /../ to view arbitrary files on the system...

http-file-server path traversal vulnerability

http-file-server is an HTTP file server. A path traversal vulnerability exists in http-file-server. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or file. An attacker could use this vulnerability to access...

FlightPath path traversal vulnerability

FlightPath is an open source academic advising system for universities. A path traversal vulnerability exists in FlightPath versions 4.x and 5.0-x. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An...