SUSE CVE-2018-16539

In Artifex Ghostscript before 9.24, attackers able to supply crafted PostScript files could use incorrect access checking in temp file handling to disclose contents of files on the system otherwise not readable...

Apple macOS Sonoma 安全漏洞

Apple macOS Sonoma is a desktop operating system from Apple, Inc. A security vulnerability exists in Apple macOS Sonoma, which stems from the handling of files that could lead to arbitrary code execution...

Ubuntu: Security Advisory (USN-4862-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

GHSA-6325-6G32-7P35 flash_tool Gem for Ruby File Download Handling Arbitrary Command Execution

flashtool Gem for Ruby contains a flaw that is triggered during the handling of downloaded files that contain shell characters. With a specially crafted file, a context-dependent attacker can execute arbitrary commands...

Insecure Temporary File

Description transformers package is using the deprecated function tempfile.mktemp which is not secure. Because a different process may create a file with this name in the time between the call to mktemp and the subsequent attempt to create the file by the first process. Functions that create...

SAP@ Host Agent Privilege Escalation

SEC Consult Vulnerability Lab Security Advisory ======================================================================= title: Privilege Escalation Vulnerabilities UNIX Insecure File Handling product: SAP® Host Agent saposcol vulnerable version: see section "Vulnerable / tested versions" fixed...

PT-2022-5845 · Microsoft · 365 Apps For Enterprise +1

Name of the Vulnerable Software and Affected Versions: Microsoft Office Graphics versions affected versions not specified Microsoft 365 Apps for Enterprise versions affected versions not specified Description: The issue is related to insufficient input validation in the Microsoft Office Graphics...

UBUNTU-CVE-2022-3810

A vulnerability was found in Axiomatic Bento4. It has been classified as problematic. This affects the function AP4File::AP4File of the file Mp42Hevc.cpp of the component mp42hevc. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been...

The vulnerability in the browser update services of Mozilla Firefox, Mozilla Firefox ESR, and the Thunderbird email client for Windows allows a hacker to write state and log files to an unprotected directory.

The vulnerability of the Mozilla Firefox, Mozilla Firefox ESR, and Thunderbird email client for Windows lies in temporal file handling errors. Exploiting this vulnerability allows an attacker to write state files and logs to an unprotected directory...

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

Design/Logic Flaw

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

CVE-2022-32807

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

CVE-2022-32807

CVE-2022-32807 affects macOS: Catalina, Big Sur (11.6.8) and Monterey (12.5). The issue arises from improper file handling, allowing an app to overwrite arbitrary files. It is tracked with a CVSS v3.1 base score of 7.1 (HIGH) with LOCAL attack vector, low attack complexity, no privileges required...

CVE-2022-32807: Undefined Security Weakness

This issue was addressed with improved file handling. This issue is fixed in Security Update 2022-005 Catalina, macOS Big Sur 11.6.8, macOS Monterey 12.5. An app may be able to overwrite arbitrary files...

CVE-2022-2979 Omron CX-Programmer

Opening a specially crafted file could cause the affected product to fail to release its memory reference potentially resulting in arbitrary code execution...

CVE-2022-1404

Delta Electronics CNCSoft All versions prior to 1.01.32 does not properly sanitize input while processing a specific project file, allowing a possible out-of-bounds read condition...

CVE-2021-4217

CVE-2021-4217 affects unzip. The flaw stems from improper handling of Unicode strings, enabling a null pointer dereference that can crash or, per source documents, potentially allow code execution when processing specially crafted zip files. Connected advisories indicate patched unzip versions &g...

PT-2022-4344 · Aveva · Aveva Edge

Name of the Vulnerable Software and Affected Versions: AVEVA Edge 2020 SP2 Patch 04201.2111.1802.0000 Description: This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required, where the target must visit a malicious page or open a malicious...

USN-5273-1 rpm vulnerabilities

Demi M. Obenour discovered that RPM Package Manager incorrectly handled certain files. An attacker could possibly use this issue to corrupt the database and cause a denial of service. CVE-2021-3421, CVE-2021-20271 Demi M. Obenour discovered that RPM Package Manager incorrectly handled memory when...

PT-2022-21484 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to Security Update 2022-005 Catalina macOS Big Sur versions prior to 11.6.8 macOS Monterey versions prior to 12.5 Description: The issue allows an app to potentially overwrite arbitrary files due to inadequate file...