PT-2019-5543

Name of the Vulnerable Software and Affected Versions SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1 SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1 SUSE Linux Enterprise Software Development Kit 12-SP4 osc...

CVE-2018-14820: External Control of File Name or Path

Advantech WebAccess 8.3.1 and earlier has a .dll component that is susceptible to external control of file name or path vulnerability, which may allow an arbitrary file deletion when processing...

CVE-2018-1000532

beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users...

PT-2018-3772

Name of the Vulnerable Software and Affected Versions beep version 1.3 and up Description The issue is related to an External Control of File Name or Path vulnerability in the --device option of the beep utility. This can result in a Local Denial of Service DoS attack, where an unprivileged user...

CVE-2018-1000532: Improper Limitation of a Pathname to a Restricted Directory

beep version 1.3 and up contains a External Control of File Name or Path vulnerability in --device option that can result in Local unprivileged user can inhibit execution of arbitrary programs by other users, allowing DoS. This attack appear to be exploitable via The system must allow local users...