UBUNTU-CVE-2021-20066

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...

CVE-2021-20066

JSDom improperly allows the loading of local resources, which allows for local files to be manipulated by a malicious web page when script execution is enabled...

JSDom Security Vulnerabilities

A security vulnerability exists in JSDom that stems from incorrectly allowing local resources to be loaded, which allows local files to be manipulated by a malicious web page when script execution is enabled...

Debian: Security Advisory (DLA-2555-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Information Disclosure

netty-codec-http is vulnerable to information disclosure. When netty's multipart decoders are used, local files containing confidential information can be accessed via the local system temporary directory if temporary storing uploads on the disk is enabled...

CVE-2020-10552

An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as wel...

CVE-2020-10552

An issue was discovered in Psyprax before 3.2.2. The Firebird database is accessible with the default user sysdba and password masterke after installation. This allows any user to access it and read and modify the contents, including passwords. Local database files can be accessed directly as wel...

CentOS 8 : curl (CESA-2020:4599)

The remote CentOS Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CESA-2020:4599 advisory. - curl: Incorrect argument check can allow remote servers to overwrite local files CVE-2020-8177 Note that Nessus has not tested for this issue but has instead...

The vulnerability in the WebExtensions extension of the Mozilla Firefox browser allows a hacker to gain unauthorized access to protected information.

The vulnerability of the WebExtensions extension in the Mozilla Firefox browser is related to deficiencies in restrictions when using the URL “view-source:” for viewing the local URL “file:”, as well as content stored in “about:cache”. Exploiting this vulnerability can allow an attacker to gain...

GHSA-395W-QHQR-9FR6 Path Traversal in Apache Flink

A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users shou...

CVE-2020-17519

A change introduced in Apache Flink 1.11.0 and released in 1.11.1 and 1.11.2 as well allows attackers to read any file on the local filesystem of the JobManager through the REST interface of the JobManager process. Access is restricted to files accessible by the JobManager process. All users shou...

Virtuozzo 7 : curl / libcurl / libcurl-devel (VZLSA-2020-5002)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5002 advisory. - curl: Incorrect argument check can allow remote servers to overwrite local files CVE-2020-8177 Note that Nessus has not tested for this issue but h...

DEBIAN-CVE-2020-8177

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used...

Input validation

curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used...

Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS : Aptdaemon vulnerabilities (USN-4664-1)

The remote Ubuntu 16.04 LTS / 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4664-1 advisory. Kevin Backhouse discovered that Aptdaemon incorrectly handled certain properties. A local attacker could use this issue to test f...

NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0074)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after- free. We are aware of targeted attack...

Information Disclosure

Google Chrome is vulnerable to information disclosure. An attacker is able to read local files when a user install a malicious extension...

MicroStrategy Cross-Site Request Forgery Vulnerability

Microstrategy is a suite of business analytics and mobility platforms from US-based Microstrategy. MicroStrategy version 10.4 suffers from a cross-site request forgery vulnerability that could allow an authenticated user to access the content of an internal web resource or leak files from a local...

RHEL 7 : curl (RHSA-2020:5002)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:5002 advisory. The curl packages provide the libcurl library and the curl utility for downloading files from servers using various protocols, including HTTP, FTP, a...

Malicious Package

Overview The package discord.dll contained malicious code. The package ran a postinstall script that exfiltrated local files such as browser local databases. The information was exfiltrated to a remote Discord webhook. Recommendation Remove the package from your system and rotate any credentials...