CVE-2019-18333

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs t...

Design/Logic Flaw

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs t...

PT-2019-15353

Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description A vulnerability has been identified that allows an attacker with network access to gain access to filenames on the server by sending specifically crafted packets...

CVE-2019-18331: Exposure of Sensitive Information to an Unauthorized Actor

A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacke...

Command Injection

Overview All versions of node-df are vulnerable to Command Injection. The package fails to sanitize filenames passed to the file option. If this value is user-controlled it may allow attackers to run arbitrary commands in the server. Recommendation No fix is currently available. Consider using an...

EulerOS 2.0 SP2 : audit (EulerOS-SA-2019-2385)

According to the version of the audit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.CVE-2015-5186 Note that Tenable Network Security has extracted the...

CVE-2019-18180

Removed by vendor...

PSF-2019-15 Remove newline characters from uu encoding methods

Filenames passed to the UU encoding methods uu.py and uucodec.py that contain a newline character will overflow data into the UU content section. This can potentially be used to inject replace or corrupt data content in a file during the decode process. The fix removes newline characters from...

OS Command Injection

Ansible is vulnerable to OS command injection. The attack is possible because the module nxosfilecopy does not validate the remotefile parameter and directly uses the filenames from the parameter to copy files to a flash or bootflash on NXOS devices, allowing an attacker to inject malicious comma...

CVE-2014-6311: Use of Insufficiently Random Values

generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

CVE-2014-1935

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

CVE-2014-1935

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

DEBIAN-CVE-2014-1935

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

Code injection

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

CVE-2014-1935

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

UBUNTU-CVE-2014-1935

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

CVE-2014-1935

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

CVE-2014-1935

The CVE-2014-1935 entry affects 9base versions 1:6-6 and 1:6-7, where temporary files are created insecurely, producing predictable filenames. Root cause and impact are described in the connected data; CVSS details from NVD indicate a base score of 5.3 (MEDIUM) for CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S...

CVE-2014-1935

9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...

PT-2019-7080

Name of the Vulnerable Software and Affected Versions 9base versions 1:6-6 through 1:6-7 Description The issue is related to the insecure creation of temporary files, resulting in predictable filenames. Recommendations For versions 1:6-6 through 1:6-7, consider implementing secure temporary file...