GHSA-6GRP-75PQ-C8CJ SaltStack has insecure /tmp file handling in salt/modules/chef.py

modules/chef.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

CVE-2021-24721

The Loco Translate WordPress plugin before 2.5.4 mishandles data inputs which get saved to a file, which can be renamed to an extension ending in .php, resulting in authenticated "translator" users being able to inject PHP code into files ending with .php in web accessible locations...

Adobe Creative Cloud < 5.5 Arbitrary file system write (APSB21-76) (macOS)

The version of Adobe Creative Cloud installed on the remote macOS host is prior to 5.5. It is, therefore, affected by a vulnerability as referenced in the apsb21-76 advisory. - Adobe Creative Cloud Desktop Application version 5.4 and earlier is affected by a file handling vulnerability that could...

CVE-2021-21068 Adobe Creative Cloud installer arbitrary file overwrite vulnerability

Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...

USN-4375-1 php5, php7.0, php7.2, php7.3, php7.4 vulnerability

It was discovered that PHP incorrectly handled certain files. An attacker could possibly use this issue to cause a denial of service...

The vulnerability of the Extension Installer Service, a component of the Microsoft Visual Studio software development tool, allows a malicious individual to escalate their privileges.

The vulnerability of the Extension Installer Service in the Microsoft Visual Studio software development environment is related to improper handling of file operations. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

CVE-2020-0819

An elevation of privilege vulnerability exists when the Windows Device Setup Manager improperly handles file operations, aka 'Windows Device Setup Manager Elevation of Privilege Vulnerability'...

CVE-2019-17009

When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. Note: This attack requires local system access and only affects Windows. Other...

Sql injection

When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. Note: This attack requires local system access and only affects Windows. Other...

CVE-2019-17009

When running, the updater service wrote status and log files to an unrestricted location; potentially allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater service. Note: This attack requires local system access and only affects Windows. Other...

CVE-2019-18180 Denial of service

Improper Check for filenames with overly long extensions in PostMaster sending in email or uploading files e.g. attaching files to mails of OTRS Community Edition and OTRS allows an remote attacker to cause an endless loop. This issue affects: OTRS AG: OTRS Community Edition 5.0.x version 5.0.38...

Security Vulnerabilities fixed in - Firefox ESR 68.3 — Mozilla

When using nested workers, a use-after-free could occur during worker destruction. This resulted in a potentially exploitable crash. When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been supplied, leading to stack corruption and a potentially exploitabl...

pdfresurrect 0.15 - Buffer Overflow

pdfresurrect 0.15 - Buffer Overflow Exploit Title: pdfresurrect 0.15 Buffer Overflow Date: 2019-07-26 Exploit Author: j0lama Vendor Homepage: https://github.com/enferex/pdfresurrect Software Link: https://github.com/enferex/pdfresurrect Version: 0.15 Tested on: Ubuntu 18.04 CVE : CVE-2019-14267...

Apple Mac OS X .sgi File Memory Corruption Vulnerability

Apple Mac OS X is an operating system developed by Apple Inc. A memory corruption vulnerability exists in Apple Mac OS X's handling of .sgi files, which allows attackers to exploit the vulnerability to construct malicious files that can be parsed by the user and can be used to execute arbitrary...

RealNetworks RealPlayer Gold 10.0 MP3 - File Handling Remote Denial of Service

RealNetworks RealPlayer Gold 10.0 MP3 - File Handling Remote Denial of Service source: https://www.securityfocus.com/bid/34719/info RealNetworks RealPlayer is prone to a remote denial-of-service vulnerability because the application fails to handle specially crafted files. Exploiting this issue...

CVE-2003-1356

The "file handling" in sort in HP-UX 10.01 through 10.20, and 11.00 through 11.11 is "incorrect," which allows attackers to gain access or cause a denial of service via unknown vectors...

CVE-2006-5964

CVE-2006-5964 affects PentaZip 8.5.1.190 and PentaSuite-PRO 8.5.1.221 (PentaWare/PentaZip). The issue is a denial-of-service via right-clicking a file with a long filename, enabling local users and user-assisted remote attackers to crash the system. Root cause centers on handling of long filename...

CVE-2006-2743

Drupal 4.6.x before 4.6.7 and 4.7.0, when running on Apache with modmime, does not properly handle files with multiple extensions, which allows remote attackers to upload, modify, or execute arbitrary files in the files directory...

[SECURITY] [DSA 691-1] New abuse packages fix local root exploit

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - -------------------------------------------------------------------------- Debian Security Advisory DSA 691-1 [email protected] http://www.debian.org/security/ Martin Schulze March 7th, 2005 http://www.debian.org/security/faq -...