4393 matches found
CVE-2019-11396
An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...
CVE-2019-11396
An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...
Design/Logic Flaw
An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...
CVE-2019-11396
An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder files / folders and configuration are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unprivileged user to...
CVE-2019-11396
CVE-2019-11396 affects Avira Free Security Suite 10. The issue involves permissive access rights on the SoftwareUpdater folder and its configuration, which are incompatible with privileged file manipulation performed by the product. An unprivileged user can create files (via abuse of SwuConfig.js...
PT-2019-12281
Name of the Vulnerable Software and Affected Versions Avira Free Security Suite version 10 Description An issue in Avira Free Security Suite allows unprivileged users to obtain SYSTEM privileges due to permissive access rights on the SoftwareUpdater folder. This can be exploited by creating...
Valve: Arbitrary file creation with semi-controlled content (leads to DoS, EoP and others) at Steam Windows Client
The vulnerability allows to create arbitrary file with some crafted text or append to existing file. Tested on actual version 5.31.28.21 SteamService.exe filevesion info. At start of the report I describe how to trigger vulnerability, than describe how to cause any consequences. How to trigger - ...
Scientific Linux Security Update : keycloak-httpd-client-install on SL7.x x86_64 (20190806)
Security Fixes : - keycloak-httpd-client-install: unsafe /tmp log file in --log-file option in keycloakcli.py CVE-2017-15111 - keycloak-httpd-client-install: unsafe use of -p/--admin-password on command line CVE-2017-15112 C Tenable Network Security, Inc. The descriptive text is C Scientific Linu...
Scientific Linux Security Update : ruby on SL7.x x86_64 (20190806)
Security Fixes : - ruby: HTTP response splitting in WEBrick CVE-2017-17742 - ruby: DoS by large request in WEBrick CVE-2018-8777 - ruby: Buffer under-read in Stringunpack CVE-2018-8778 - ruby: Unintentional directory traversal by poisoned NULL byte in Dir CVE-2018-8780 - ruby: Tainted flags are n...
cPanel Input Validation Error Vulnerability (CNVD-2019-29629)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 60.0.25. The vulnerability can be exploited to create files and chang...
Moderate: Red Hat Security Advisory: ruby security update
An update for ruby is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the C...
CVE-2016-10771
cPanel before 60.0.25 allows file-create and file-chmod operations during ModSecurity Audit logfile processing SEC-165...
Unauthorized File Write
samba is vulnerable to unauthorized file write. An improper implementation of the RPC endpoint that emulates the Windows registry service API allows an unprivileged attacker to create new registry hive file which can lead to creation of new files in the samba share...
cPanel Input Validation Error Vulnerability (CNVD-2019-33884)
cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. An input validation error vulnerability exists in cPanel. An attacker can exploit the vulnerability to create files...
CVE-2019-14388
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
Design/Logic Flaw
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
CVE-2019-14388
cPanel before 82.0.2 allows unauthenticated file creation because Exim log parsing is mishandled SEC-507...
CVE-2019-14388
CVE-2019-14388 affects cPanel prior to 82.0.2, allowing unauthenticated file creation due to mishandled Exim log parsing (SEC-507). Root cause: improper handling of Exim logs enables file creation without authentication. Impact: unauthorized file creation; no explicit exploitation details provide...
PT-2019-13657
Name of the Vulnerable Software and Affected Versions cPanel versions prior to 82.0.2 Description The issue arises from mishandled Exim log parsing, allowing unauthenticated file creation. Recommendations For versions prior to 82.0.2, update to version 82.0.2 or later to resolve the issue...
