7040 matches found
CVE-2024-52291 Craft has a Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Craft is a content management system CMS. A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme e.g., file://file:////. This enables the attacker to specify sensitive folders as the file system, leading to potential file...
CVE-2024-52291 Craft has a Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Craft is a content management system CMS. A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme e.g., file://file:////. This enables the attacker to specify sensitive folders as the file system, leading to potential file...
GHSA-JRH5-VHR9-QH7Q Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Summary A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme e.g., file://file:////. This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads,...
Local File System Validation Bypass Leading to File Overwrite, Sensitive File Access, and Potential Code Execution
Summary A vulnerability in CraftCMS allows an attacker to bypass local file system validation by utilizing a double file:// scheme e.g., file://file:////. This enables the attacker to specify sensitive folders as the file system, leading to potential file overwriting through malicious uploads,...
Arbitrary File Overwrite
HornetQ is vulnerable to Arbitrary File Overwrite. The vulnerability is due to an issue in the createTempFile method, which allows attackers to arbitrarily overwrite files or access sensitive information...
CVE-2024-34014
Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension for Plesk Linux...
CVE-2024-34014
Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension for Plesk Linux...
CVE-2024-34014
CVE-2024-34014 affects Acronis Backup plugin for cPanel & WHM (Linux) prior to builds 1.8.3.818 and 1.9.1.892, Acronis Backup extension for Plesk prior to 1.8.6.599, and Acronis Backup plugin for DirectAdmin prior to 1.2.2.181. The vulnerability is an arbitrary file overwrite during recovery caus...
CVE-2024-34014
Arbitrary file overwrite during recovery due to improper symbolic link handling. The following products are affected: Acronis Backup plugin for cPanel & WHM Linux before build 1.8.3.818, Acronis Backup plugin for cPanel & WHM Linux before build 1.9.1.892, Acronis Backup extension for Plesk Linux...
CVE-2024-50588
CVE-2024-50588 involves an unauthenticated attacker on the local network who can exploit known default credentials to gain remote DBA access to the Elefant Firebird database. The database stores sensitive data including patient information and login credentials. This access enables the attacker t...
AZL-52417 CVE-2024-9902 affecting package ansible for versions less than 2.17.11-1
A flaw was found in Ansible. The ansible-core user module can allow an unprivileged user to silently create or replace the contents of any file on any system path and take ownership of it when a privileged user executes the user module against the unprivileged user's home directory. If the...
RHEL 7 : instack-undercloud (RHSA-2017:2726)
The remote Redhat Enterprise Linux 7 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2017:2726 advisory. instack-undercloud provides a collection of scripts and elements that can be used to install an OpenStack undercloud using python-instack. The...
hornetq vulnerable to file overwrite, sensitive information disclosure
An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...
GHSA-R7MV-MV7M-PJW3 hornetq vulnerable to file overwrite, sensitive information disclosure
An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...
CVE-2024-51127
An issue in the createTempFile method of hornetq v2.4.9 allows attackers to arbitrarily overwrite files or access sensitive information...
HornetQ 安全漏洞
HornetQ is an open source project from HornetQ Open Source for building multi-protocol, embeddable, very high performance clustered asynchronous messaging systems. A security vulnerability exists in HornetQ version v2.4.9, which stems from the createTempFile function allowing an attacker to...
CVE-2024-51127
CVE-2024-51127 affects hornetq-core-client in Red Hat JBoss EAP 7.x. The flaw in HornetQ’s createTempFile path allows arbitrary file overwrite or access to sensitive information. Red Hat advisories RHSA-2025:16668, RHSA-2025:16667 and RHSA-2025:3467 indicate this issue is addressed in EAP 7.1.12,...
PT-2024-34531 · Hornetq · Hornetq
Name of the Vulnerable Software and Affected Versions: hornetq version 2.4.9 Description: An issue in the createTempFile method allows attackers to arbitrarily overwrite files or access sensitive information. Recommendations: For hornetq version 2.4.9, consider disabling the createTempFile method...