4328 matches found
Code injection
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...
CVE-2018-2025
IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...
Insecure Temporary Directory Creation
rply creates temporary directory in an insecure manner. It uses tempfile.gettempdir to create /tmp directories per user, allowing any local user to perform symlink or hardlink attacks which can result in system directories being overwritten and causing a denial of service condition...
CloudBees Jenkins Support Core Plugin Path Traversal Vulnerability
CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Support Core Plugin is used in one of them to provide...
ALPINE-CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...
CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...
Shack Forms Pro extension path traversal vulnerability in Joomla!
Joomla! is the U.S. Open Source Matters team using PHP and MySQL development of a set of open source, cross-platform content management system CMS. Shack Forms Pro extension is used in one of the form creation plugin . A path traversal vulnerability exists in the Shack Forms Pro extension for...
The vulnerability of the ssedb_search_user_by_upn_res() function in the access control service for remote directories and the authentication mechanism sssd allows a intruder to gain unauthorized access to protected information.
The vulnerability of the ssedbsearchuserbyupnres function of the access control service for remote directories and the sssd authentication mechanism is related to insufficient validation of input data when querying the local cache that stores password hashes. Exploiting this vulnerability could...
UBUNTU-CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...
CVE-2019-4652
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...
CVE-2019-4652
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...
CVE-2019-4652
IBM Spectrum Protect Plus 10.1.0 through 10.1.4 uses insecure file permissions on restored files and directories in Windows which could allow a local user to obtain sensitive information or perform unauthorized actions. IBM X-Force ID: 170963...
CVE-2019-18924: Improper Limitation of a Pathname to a Restricted Directory
Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ and variations, it is possible to list all the directories and check if a particular file exists...
CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
DEBIAN-CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
Design/Logic Flaw
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
CVE-2013-1809
CVE-2013-1809 affects Gambas before 3.4.0. The issue arises from insecure temporary directories, allowing remote attackers to move or manipulate directory contents or perform symlink attacks. This is documented across multiple sources (NVD entry and related advisories). The provided materials des...
CVE-2013-1809
Gambas before 3.4.0 allows remote attackers to move or manipulate directory contents or perform symlink attacks due to the creation of insecure temporary directories...
