GSD-2021-1000624 btrfs: return whole extents in fiemap

btrfs: return whole extents in fiemap This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.4.124 by commit 55575c08502f291cdeff09428189b84084ffa91...

The vulnerability of the NTFS file system in Windows operating systems allows attackers to increase their privileges.

The vulnerability of the NTFS file system in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to enhance their privileges...

PT-2021-2858 · Cisco · Cisco Sd-Wan Vmanage

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN vManage Software affected versions not specified Description: The issue is related to a vulnerability in the web-based management interface of Cisco SD-WAN vManage Software. It is caused by insufficient file scope limiting,...

CVE-2021-27096

NTFS Elevation of Privilege Vulnerability...

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple for Mac computers. An arbitrary file read vulnerability exists in Apple macOS, which arises from an application not properly applying security restrictions within the APFS component of macOS. A local user can read arbitrary files on...

Google Chrome File System API Policy Enforcement Deficiency Vulnerability (CNVD-2021-28289)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. A file system API policy enforcement deficiency vulnerability exists in versions of Google Chrome prior to 88.0.4324.96. A remote attacker can bypass file system...

CVE-2020-17518

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or...

The vulnerability of the file system of the IoT Field Network Director software management tool allows a hacker to gain access to modify, add, or delete data.

The vulnerability of the access control function in the IoT network management software, Field Network Director, is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain access to modify, add, or...

CVE-2020-26078

A vulnerability in the file system of Cisco IoT Field Network Director FND could allow an authenticated, remote attacker to overwrite files on an affected system. The vulnerability is due to insufficient file system protections. An attacker could exploit this vulnerability by crafting API request...

UBUNTU-CVE-2020-6104

An exploitable information disclosure vulnerability exists in the getdnodeofdata functionality of F2fs-Tools F2fs.Fsck 1.13. A specially crafted f2fs filesystem can cause information disclosure resulting in a information disclosure. An attacker can provide a malicious file to trigger this...

Adobe Creative Cloud Desktop Application Backlink Vulnerability (NVD-C-2020-154995)

Adobe Creative Cloud Desktop Application is a suite of applications for managing applications and services in the Creative Cloud Membership Management Center from Adobe USA. The program supports synchronizing and sharing files, managing fonts, and accessing asset libraries for commercial...

CVE-2020-3302

A vulnerability in the web UI of Cisco Firepower Management Center FMC Software could allow an authenticated, remote attacker to overwrite files on the file system of an affected device. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by...

Denial Of Service (DoS)

kernel-rt is vulnerable to denial of service DoS. The vulnerability exists as a deadlock flaw was found in the Linux kernel splice implementation. This deadlock could occur during interactions between the genericfilesplicewrite and splicefrompipe functions, possibly leading to a partial denial of...

CVE-2020-3861

The issue was addressed with improved permissions logic. This issue is fixed in iTunes for Windows 12.10.4. A user may gain access to protected parts of the file system...

Code injection

Opencast before 8.1 and 7.6 allows almost arbitrary identifiers for media packages and elements to be used. This can be problematic for operation and security since such identifiers are sometimes used for file system operations which may lead to an attacker being able to escape working directorie...

CVE-2019-0202

The Apache Storm Logviewer daemon exposes HTTP-accessible endpoints to read/search log files on hosts running Storm. In Apache Storm versions 0.9.1-incubating to 1.2.2, it is possible to read files off the host's file system that were not intended to be accessible via these endpoints...

CVE-2019-13229

Affected software: deepin-clone up to version 1.1.3. Root cause: Helper::getPartitionSizeInfo writes a log at /tmp/partclone.log and follows symlinks, enabling an unprivileged user to perform a symlink attack to create or overwrite arbitrary filesystem files. Impact: local, unprivileged attacker ...

EulerOS Virtualization 3.0.1.0 : glibc (EulerOS-SA-2019-1552)

According to the versions of the glibc packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - It was discovered that the nssfiles backend for the Name Service Switch in glibc would return incorrect data to applications or...

USN-3914-2 ntfs-3g update

USN-3914-1 fixed vulnerabilities in NTFS-3G. As an additional hardening measure, this update removes the setuid bit from the ntfs-3g binary. Original advisory details: A heap buffer overflow was discovered in NTFS-3G when executing it with a relative mount point path that is too long. A local...

Cisco Unified Computing System Local Command Injection Vulnerability (CNVD-2018-13560)

Cisco Unified Computing System UCS Software is a set of unified computing system of the United States Cisco Cisco. The system through the extensive use of virtualization technology will be integrated into a platform of network, computing and virtualization resources. A local command injection...