IBM StoredIQ Information Disclosure Vulnerability

IBM StoredIQ is a suite of data visualization and processing platforms from IBM, USA. The platform provides scalable analytics and governance of unstructured data, as well as records management, storage optimization and migration of data. An information disclosure vulnerability exists in IBM...

GHSA-W29M-FJP4-QHMQ Unsafe Identifiers in Opencast

Impact Opencast allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker being able to escape working directories and write...

CVE-2020-5230 Opencast uses unsafe identifiers

Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker being able to escape working directorie...

Linux: Strict permissions for directories owned by root

This script searches for directories owned by root user with another group or access permissions stricter then 755. Note: This script dramatically increases the scan duration. Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-17103

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...

CVE-2019-17103

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...

git: Remote code execution in recursive clones with nested submodules

A flaw was discovered where git improperly validates submodules' names used to construct git metadata paths and does not prevent them from being nested in existing directories used to store another submodule's metadata. A remote attacker could abuse this flaw to trick a victim user into cloning a...

CVE-2019-17103: Incorrect Default Permissions

An Incorrect Default Permissions vulnerability in the BDLDaemon component of Bitdefender AV for Mac allows an attacker to elevate permissions to read protected directories. This issue affects: Bitdefender AV for Mac versions prior to 8.0.0...

Huawei EulerOS: Security Advisory for bubblewrap (EulerOS-SA-2019-1762)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

QEMU Path Traversal Vulnerability

QEMU Quick Emulator is a suite of analog processor software. A path traversal vulnerability exists in QEMU. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in a resource or file path. An attacker could use this vulnerability to acce...

CVE-2019-19339

It was found that the Red Hat Enterprise Linux 8 kpatch update did not include the complete fix for CVE-2018-12207. A flaw was found in the way Intel CPUs handle inconsistency between, virtual to physical memory address translations in CPU's local cache and system software's Paging structure...

SSRF when adding Jira server in admin plugin

h2. Please be aware that Atlassian does not consider this issue to represent a security risk as the functionality is restricted to users with administrative rights. h3. Issue Summary When adding a Jira server in Bamboo under the "User directories" module, an attacker can put any value in the...

OPENSUSE-SU-2020:0057-1 Security update for singularity

This update for singularity fixes the following issues: - CVE-2019-19724: Fixed incorrect file permissions on user configuration and cache directories boo1159550...

Juniper Networks Junos Space Path Traversal Vulnerability

Juniper Junos Space is a network management solution from Juniper Networks. The solution supports automated configuration, monitoring and troubleshooting of devices and services throughout their lifecycle. A path traversal vulnerability in Juniper Networks Junos Space prior to version 19.4R1, whi...

Gila CMS Directory Traversal Vulnerability

Gila CMS is an open source content management system CMS based on PHP and MySQL. A path traversal vulnerability exists in /cm/delete?t= in Gila CMS version 1.11.8. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource...

Gila CMS path traversal vulnerability (CNVD-2020-03268)

Gila CMS is an open source content management system CMS based on PHP and MySQL. A path traversal vulnerability exists in Gila CMS version 1.11.8. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An...

File Inclusion Vulnerability in Apache Tomcat Server

Apache and Tomcat are Apache open source organization developed to handle HTTP services project , both are free , both can be run as a stand-alone Web server . Apache Tomcat server has a file inclusion vulnerability that can be exploited by an attacker to read or include arbitrary files in all...

Cross-site Scripting (XSS)

seeftl is vulnerable to cross-site scripting XSS. During the directories listing, the input filename is not escaped before printing the user input directly on the screen, allowing an attacker to inject arbitrary script...

TVT NVMS-1000 Directory Traversal Vulnerability

TVT Digital Technology TVT NVMS-1000 is a network surveillance video management system from TVT Digital Technology, China. A directory traversal vulnerability exists in the TVT Digital Technology TVT NVMS-1000. The vulnerability stems from a failure of a network system or product to properly filt...

Buffalo TeraStation Directory Traversal (CVE-2018-13322)

A directory traversal vulnerability exists in Buffalo TeraStation TS5600D. Successful exploitation of this vulnerability would allow a remote attacker to list the contents of arbitrary directories on the affected system...