Moderate: device-mapper-multipath security and bug fix update

The device-mapper-multipath packages provide tools that use the device-mapper multipath kernel module to manage multipath devices. Security Fixes: device-mapper-multipath: multipathd: insecure handling of files in /dev/shm leading to symlink attack CVE-2022-41973 For more details about the securi...

ROS-20230322-03

A vulnerability in the Git program is related to the input of processed input data - a path outside the working tree can be overwritten by a user running "git apply". Exploiting the vulnerability could allow an attacker acting remotely to run the affected command against a malicious or compromise...

SUSE CVE-2004-2265

UUDeview 0.5.20 and earlier handles temporary files insecurely during decoding, with unknown attack vectors and impact...

SUSE CVE-2010-3373

paxtest handles temporary files insecurely...

Ubuntu: Security Advisory (USN-5258-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Cross-site Request Forgery (CSRF)

github.com/go-macaron/csrf is vulnerable to Cross-site Request Forgery CSRF. The vulnerability exists because the Generate function in csrf.go does not set the secure mode for the CSRF cookie as the value is hardcoded to false for the corresponding arguments of SetCookie, allowing an attacker to...

ROS-20221103-03

A vulnerability in the Apache Batik XML SVG graphics rendering, generation, and management library is related to the fact that, the application allows Java classes to be run via JavaScript. Exploitation of the vulnerability could allow an attacker acting remotely to use JavaScript to execute a Ja...

The vulnerability of Fabric Connectors in the Fabric View software module of the FortiTester, a software-hardware platform for diagnosing and auditing computer networks, as well as the FortiAnalyzer device for monitoring and analyzing security events, allows attackers to carry out cross-site scripting attacks.

The vulnerability of the Fabric Connector component in the FortiTester software, a hardware-based diagnostic and audit tool for computer networks, as well as the FortiAnalyzer tool for event monitoring and analysis, is related to the lack of protective measures taken for the web page structure wh...

Nextcloud: Desktop client can be tricked into opening/executing local files when clicking a nc://open/ link

The Nextcloud Desktop Client in version 3.6.0 was vulnerable to a Remote Code Execution that could be exploited by anyone who could upload files to an instance the user had access to. The vulnerability was caused by the insecure implementation of the "local edit" feature, which allowed attackers ...

Command Injection

node-latex-pdf is vulnerable to command injection. Insecure handling of compilation and execution of source file in selflatex function in node-latex-pdf.js allows an attacker to inject and execute malicious commands...

Marval MSM 操作系统命令注入漏洞

Marval MSM is an innovative IT service management software from Marval UK. A security vulnerability exists in Marval MSM version v14.19.0.12476, which stems from insecure handling of VBScript, resulting in vulnerability to operating system command injection...

Salt improper handling of tmp files

modules/serverdensitydevice.py in SaltStack before 2014.7.4 does not properly handle files in /tmp...

Strapi 3.6.8 Password Disclosure / Insecure Handling Vulnerabilities

Exploit Title: Strapi " Exploit Author: Kitchaphan Singchai idealphase Vendor Homepage: https://strapi.io/ Software Link: https://github.com/strapi/strapi/releases Vulnerable Version: ..SNIP.. Redirecting to /documentation. Perform Base64 decoding and we got plaintext password in “documentation”...

Strapi 3.6.8 Password Disclosure / Insecure Handling

Exploit Title: Strapi " Date: 2022-03-30 Exploit Author: Kitchaphan Singchai idealphase Vendor Homepage: https://strapi.io/ Software Link: https://github.com/strapi/strapi/releases Vulnerable Version: ..SNIP.. Redirecting to /documentati...

Path traversal

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

Design/Logic Flaw

Insecure direct object reference in SUNNY TRIPOWER 5.0 Firmware version 3.10.16.R leads to unauthorized user groups accessing due to insecure cookie handling...

CVE-2021-46417

Insecure handling of a download function leads to disclosure of internal files due to path traversal with root privileges in Franklin Fueling Systems Colibri Controller Module 1.8.19.8580...

CVE-2021-46417

CVE-2021-46417 affects Franklin Fueling Systems Colibri Controller Module 1.8.19.8580. The Local File Inclusion vulnerability arises from insecure handling of a download function that allows path traversal (example: /cgi-bin/tsaupload.cgi?file_name=../../../../../..//etc/passwd). This can disclos...

containerd Image Volume Insecure Handling Exploit

containerd: Insecure handling of image volumes containerd's cri plugin handles image volumes containing path traversals insecurely. This can be used to copy arbitrary host directories to a container-mounted path. OCI images contain a JSON config file described in...

post-loader 跨站脚本漏洞

post-loader is a Webpack loader for China EGOIST individual developers. It is used to write blog posts in Markdown. A cross-site scripting vulnerability exists in post-loader, which stems from the use of the markdown parser in an insecure manner, so that any javascript code in a markdown input fi...