1029 matches found
EulerOS 2.0 SP2 : lftp (EulerOS-SA-2019-2485)
According to the version of the lftp package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - It has been discovered that lftp up to and including version 4.8.3 does not properly sanitize remote file names, leading to a loss of integrity on the...
CVE-2014-6311
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
DEBIAN-CVE-2014-6311
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
CVE-2014-6311
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
CVE-2014-6311
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
Code injection
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
UBUNTU-CVE-2014-6311
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
CVE-2014-6311
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
CVE-2014-6311
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
CVE-2014-6311
The CVE-2014-6311 entry describes a privilege-escalation flaw in ace prior to 6.2.7+dfsg-2 where generate_doygen.pl creates predictable file names in /tmp. The documented impact is elevated privileges for attackers who can leverage these predictable names. Affected component: ace (script generate...
edk2: Buffer overflows in PartitionDxe and UdfDxe with long file names and invalid UDF media
Buffer overflows were discovered in UDF-related codes under MdeModulePkg\Universal\Disk\PartitionDxe\Udf.c and MdeModulePkg\Universal\Disk\UdfDxe, which could be triggered with long file names or invalid formatted UDF media...
CVE-2009-5043
burn allows file names to escape via mishandled quotation marks...
CVE-2009-5043
burn allows file names to escape via mishandled quotation marks...
Information disclosure
burn allows file names to escape via mishandled quotation marks...
CVE-2009-5043
burn allows file names to escape via mishandled quotation marks...
PT-2019-6064 · Qnap · Qnap Photo Station
Name of the Vulnerable Software and Affected Versions: QNAP Photo Station affected versions not specified Description: This issue allows remote attackers to access or modify system files due to external control of file name or path. It is related to incorrect limitation of the directory path name...
Cisco Wireless LAN Controller Path Traversal Vulnerability
According to its self-reported version, Cisco Wireless LAN Controller WLC is affected by a directory traversal vulnerability due to improper sanitization of user-supplied input in command-line parameters that describe file names. An authenticated, local attacker can exploit this to view system...
CVE-2019-18202
Information Disclosure is possible on WAGO Series PFC100 and PFC200 devices before FW12 due to improper access control. A remote attacker can check for the existence of paths and file names via crafted HTTP requests...
The vulnerability of Firefox browsers, caused by display errors in file names in the “Downloads” tab, allows attackers to perform spear-phishing attacks.
The vulnerability of Firefox browsers arises due to errors in the character display in file names within the “Downloads” tab. Exploiting this vulnerability allows a remote attacker to perform spear-phishing attacks...
