S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2023-014

S3 File System s3fs provides an additional file system to your Drupal site, which stores files in Amazon's Simple Storage Service S3 or any other S3-compatible storage service. This module may fail to validate that a file being requested to be moved to storage was uploaded during the same web...

SUSE CVE-2021-39258

A crafted NTFS image can cause out-of-bounds reads in ntfsattrfind and ntfsexternalattrfind in NTFS-3G 2021.8.22...

Ubuntu: Security Advisory (USN-5854-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-43494

An unauthorized user could be able to read any file on the system, potentially exposing sensitive information...

The vulnerability of the proprietary file system Windows Extensible File Allocation Table in the Windows operating system allows a hacker to increase their privileges.

The vulnerability of the proprietary file system, Windows Extensible File Allocation Table, in the Windows operating system is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

USN-5711-1 ntfs-3g vulnerability

Yuchen Zeng and Eduardo Vela discovered that NTFS-3G incorrectly validated certain NTFS metadata. A local attacker could possibly use this issue to gain privileges...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS, which stems from a shortcut that may be able to check...

Information disclosure

Windows Distributed File System DFS Information Disclosure Vulnerability...

PT-2022-25489 · Nokia · Nokia 1350 Oms

Name of the Vulnerable Software and Affected Versions: NOKIA 1350OMS version R14.2 Description: An issue exists in the software, where multiple Relative Path Traversal issues are present in different specific endpoints via the file parameter. This allows a remote authenticated attacker to read...

The vulnerability of the CIFS file system mounting utility package provided by cifs-utils for Linux operating systems allows a hacker to gain unauthorized access to protected information.

The vulnerability of the CIFS file system mounting utility package developed by cifs-utils for Linux operating systems is related to the disclosure of information in the erroneous data area. Exploiting this vulnerability allows a malicious actor to disclose the protected information remotely...

Microsoft Windows NFS 代码注入漏洞

Microsoft Windows NFS is a network file system from Microsoft Corporation USA. A code injection vulnerability exists in the Microsoft Windows Network File System. The following products and editions are affected:Windows Server 2012 Server Core installation,Windows Server 2012 R2,Windows Server 20...

CVE-2021-42890

TOTOLINK EX1200T V4.1.2cu.5215 contains a remote command injection vulnerability in function NTPSyncWithHost of the file system.so which can control hostTime to attack...

USN-5452-1 ntfs-3g vulnerability

It was discovered that NTFS-3G was incorrectly validating NTFS metadata in its ntfsck tool by not performing boundary checks. A local attacker could possibly use this issue to cause a denial of service or to execute arbitrary code...

ntfs-3g: Heap buffer overflow triggered by a specially crafted Unicode string

The ntfs3g package is susceptible to a heap overflow on crafted unicode input. When processing NTFS unicode input, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...

The vulnerability of the Oracle Solaris operating system’s file system allows a perpetrator to trigger a service failure.

The vulnerability of the Oracle Solaris operating system’s file system is related to the improper release of resources. Exploiting this vulnerability can allow an attacker to cause service failures...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to the insecure management of privileges. Exploiting this vulnerability can allow an attacker to increase their privileges...

Updated kernel packages fix security vulnerability

This kernel update is based on upstream 5.15.16 and fixes at least the following security issue: William Liu and Jamie Hill-Daniel discovered that the file system context functionality in the Linux kernel contained an integer underflow vulnerability, leading to an out-of-bounds write. A local...

The vulnerability of the `ntfs inode_sync_standard_information` function in the NTFS file system driver for the FUSE NTFS-3G module, related to writing beyond the buffer’s memory limit, allows a malicious actor to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the ntfs inodesyncstandardinformation function in the NTFS file system driver for the FUSE NTFS-3G module is related to writing beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, a...

CVE-2022-21963

Windows Resilient File System ReFS Remote Code Execution Vulnerability...

CVE-2021-22028

In versions of Greenplum database prior to 5.28.6 and 6.14.0, greenplum database contains a file path traversal vulnerability leading to information disclosure from the file system. A malicious user can read/write information from the file system using this vulnerability...