91 matches found
Security Advisory EPM November 2025 for EPM 2024
Summary Ivanti has released updates for Ivanti Endpoint Manager which addresses three high vulnerabilities. Successful exploitation could allow a local authenticated attacker to write arbitrary files anywhere on disk. Two of the resolved vulnerabilities, CVE-2025-9713 and CVE-2025-11622, were...
EUVD-2016-6204
Malware in sbrugna...
EUVD-2017-15253
Malware in sbrugna...
EUVD-2018-0570
Malware in sbrugna...
EUVD-2015-7658
Malware in sbrugna...
EUVD-2010-0429
Malware in sbrugna...
EUVD-2018-0670
Malware in sbrugna...
EUVD-2022-5711
Malicious code in bioql PyPI...
EUVD-2022-28209
Malicious code in bioql PyPI...
EUVD-2024-18519
Malicious code in bioql PyPI...
CVE-2025-50817
Removed by vendor...
NewStart CGSL MAIN 7.02 : cpio Vulnerability (NS-SA-2025-0164)
The remote NewStart CGSL host, running version MAIN 7.02, has cpio packages installed that are affected by a vulnerability: - cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2015-1197 Note...
VulnCheck KEV: CVE-2025-35939
Craft CMS contains an external control of assumed-immutable web parameter vulnerability. This vulnerability could allow an unauthenticated client to introduce arbitrary values, such as PHP code, to a known local file location on the server. This vulnerability could be chained with...
Linux Distros Unpatched Vulnerability : CVE-2015-5701
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this...
Linux Distros Unpatched Vulnerability : CVE-2015-3202
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking 1 mount or 2 umount as root, which allows local users to write to...
SUSE CVE-2019-11249
The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container to create a tar archive, copies it over the network, and kubectl unpacks it on the user's machine. If the tar binary in the container is...
K17212: PHP vulnerability CVE-2014-5459
Security Advisory Description The PEARREST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a 1 rest.cachefile or 2 rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions...
SUSE CVE-2014-5459
The PEARREST class in REST.php in PEAR in PHP through 5.6.0 allows local users to write to arbitrary files via a symlink attack on a 1 rest.cachefile or 2 rest.cacheid file in /tmp/pear/cache/, related to the retrieveCacheFirst and useLocalCache functions...
SUSE CVE-2015-7758
Gummi 0.6.5 allows local users to write to arbitrary files via a symlink attack on a temporary dot file that uses the name of an existing file and a 1 .aux, 2 .log, 3 .out, 4 .pdf, or 5 .toc extension for the file name, as demonstrated by .thesis.tex.aux...
