17474 matches found
USN-4844-1 cinnamon vulnerability
Matthias Gerstner discovered that the cinnamon-settings-users utility in Cinnamon did not safely handle symlinks. An unprivileged attacker could potentially use this vulnerability to overwrite arbitrary files as root...
GHSA-GMJW-49P4-PCFM Prototype poisoning
Impact The issue is as follows: when msgpack5 decodes a map containing a key "proto", it assigns the decoded value to proto. As you are no doubt aware, Object.prototype.proto is an accessor property for the receiver's prototype. If the value corresponding to the key proto decodes to an object or...
CVE-2021-21068 Adobe Creative Cloud installer arbitrary file overwrite vulnerability
Adobe Creative Cloud Desktop Application version 5.3 and earlier is affected by a file handling vulnerability that could allow an attacker to cause arbitrary file overwriting. Exploitation of this issue requires physical access and user interaction...
CVE-2021-22550
An attacker can modify the pointers in enclave memory to overwrite arbitrary memory addresses within the secure enclave. It is recommended to update past 0.6.3 or git commit https://github.com/google/asylo/commit/a47ef55db2337d29de19c50cd29b0deb2871d31c...
CVE-2021-22549
An attacker can modify the address to point to trusted memory to overwrite arbitrary trusted memory. It is recommended to update past 0.6.2 or git commit https://github.com/google/asylo/commit/53ed5d8fd8118ced1466e509606dd2f473707a5c...
Huawei EulerOS: Security Advisory for python-pip (EulerOS-SA-2021-1648)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2021-20671
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution...
Input validation
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution...
CVE-2021-20671
Invalid file validation on the upload feature in GROWI versions v4.2.2 allows a remote attacker with administrative privilege to overwrite the files on the server, which may lead to arbitrary code execution...
NewStart CGSL MAIN 6.02 : python-pip Vulnerability (NS-SA-2021-0081)
The remote NewStart CGSL host, running version MAIN 6.02, has python-pip packages installed that are affected by a vulnerability: - The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../ in a...
Adobe Creative Cloud Desktop Application 安全漏洞
Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file overwrite vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit this vulnerability to execute...
Vulnerabilities fixed in Adobe Creative Cloud
Adobe has fixed vulnerabilities in Creative Cloud Desktop Application. A malicious party can exploit the vulnerabilities to injecting system commands which are then executed by the application. Also, the vulnerabilities can be exploited to obtain elevated privileges and to overwrite arbitrary...
Adobe Creative Cloud Desktop Application Arbitrary File Overwrite Vulnerability
Adobe Creative Cloud Desktop Application is the management software for various Creative Cloud applications and services. An arbitrary file overwrite vulnerability exists in Adobe Creative Cloud Desktop Application 5.3 and earlier versions. An attacker can exploit this vulnerability to execute...
NewStart CGSL MAIN 6.02 : curl Vulnerability (NS-SA-2021-0067)
The remote NewStart CGSL host, running version MAIN 6.02, has curl packages installed that are affected by a vulnerability: - curl 7.20.0 through 7.70.0 is vulnerable to improper restriction of names for files and other resources that can lead too overwriting a local file when the -J flag is used...
Weseek GROWI 输入验证错误漏洞
GROWI is a team collaboration software. An input validation error vulnerability exists in WESEEK GROWI 4.2.2 and earlier versions, which can be exploited by remote attackers to overwrite files on the server with arbitrary code execution...
WESEEK GROWI Input Validation Error Vulnerability (CNVD-2021-16346)
GROWI is a team collaboration software. An input validation error vulnerability exists in WESEEK GROWI 4.2.2 and earlier versions, which can be exploited by remote attackers to overwrite files on the server with arbitrary code execution...
OSV-2021-494 Heap-buffer-overflow in AK::ByteBuffer::overwrite
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=31698 Crash type: Heap-buffer-overflow READ 1 Crash state: AK::ByteBuffer::overwrite Crypto::PK::RSA::parsersakey FuzzRSAKeyParsing.cpp...
Samsung quram code execution vulnerability
Samsung quram is a cell phone application from Samsung South Korea. It provides a translation function. A security vulnerability exists in the quram library version prior to SMR Jan-2021 Release 1, which can be exploited by an attacker to overwrite arbitrary memory and allow arbitrary code...