2474 matches found
CVE-2019-18333
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs t...
Design/Logic Flaw
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to filenames on the server by sending specifically crafted packets to 8090/tcp. Please note that an attacker needs t...
PT-2019-15353
Name of the Vulnerable Software and Affected Versions SPPA-T3000 Application Server versions prior to Service Pack R8.2 SP2 Description A vulnerability has been identified that allows an attacker with network access to gain access to filenames on the server by sending specifically crafted packets...
CVE-2019-18331: Exposure of Sensitive Information to an Unauthorized Actor
A vulnerability has been identified in SPPA-T3000 Application Server All versions Service Pack R8.2 SP2. An attacker with network access to the Application Server could gain access to path and filenames on the server by sending specifically crafted packets to 1099/tcp. Please note that an attacke...
Command Injection
Overview All versions of node-df are vulnerable to Command Injection. The package fails to sanitize filenames passed to the file option. If this value is user-controlled it may allow attackers to run arbitrary commands in the server. Recommendation No fix is currently available. Consider using an...
EulerOS 2.0 SP2 : audit (EulerOS-SA-2019-2385)
According to the version of the audit packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Audit before 2.4.4 in Linux does not sanitize escape characters in filenames.CVE-2015-5186 Note that Tenable Network Security has extracted the...
CVE-2019-18180
Removed by vendor...
PSF-2019-15 Remove newline characters from uu encoding methods
Filenames passed to the UU encoding methods uu.py and uucodec.py that contain a newline character will overflow data into the UU content section. This can potentially be used to inject replace or corrupt data content in a file during the decode process. The fix removes newline characters from...
OS Command Injection
Ansible is vulnerable to OS command injection. The attack is possible because the module nxosfilecopy does not validate the remotefile parameter and directly uses the filenames from the parameter to copy files to a flash or bootflash on NXOS devices, allowing an attacker to inject malicious comma...
CVE-2014-6311: Use of Insufficiently Random Values
generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...
CVE-2014-1935
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...
DEBIAN-CVE-2014-1935
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...
CVE-2014-1935
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...
Code injection
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...
CVE-2014-1935
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...
UBUNTU-CVE-2014-1935
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...
CVE-2014-1935
9base 1:6-6 and 1:6-7 insecurely creates temporary files which results in predictable filenames...
CVE-2014-1935
The CVE-2014-1935 entry affects 9base versions 1:6-6 and 1:6-7, where temporary files are created insecurely, producing predictable filenames. Root cause and impact are described in the connected data; CVSS details from NVD indicate a base score of 5.3 (MEDIUM) for CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S...