CVE-2019-3902

A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository...

CVE-2019-3902

A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository...

CVE-2019-3902

A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside a repository...

CVE-2019-0158

Insufficient path checking in the installation package for IntelR Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-0158

Insufficient path checking in the installation package for IntelR Graphics Performance Analyzer for Linux version 18.4 and before may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel® Graphics Performance Analyzer for Linux Advisory

Summary: A potential security vulnerability in Intel® Graphics Performance Analyzer for Linux may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2019-0158 Description: Insufficient path checking in the...

CVE-2019-0088

Insufficient path checking in IntelR System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2019-0088

Insufficient path checking in IntelR System Support Utility for Windows before 2.5.0.15 may allow an authenticated user to potentially enable an escalation of privilege via local access...

CVE-2019-0088

Intel System Support Utility for Windows prior to 2.5.0.15 is affected by CVE-2019-0088 due to insufficient path checking, enabling an authenticated user to potentially escalate privileges via local access. The vulnerability is documented across CVE records and Intel’s advisory, which confirms af...

Apple iOS Mobile Replayer Arbitrary Code Execution Vulnerability

Apple iOS is an operating system developed by Apple for use in cell phones and other devices. A path-checking vulnerability exists in the Apple iOS Mobile Replayer handling, which could be exploited by an attacker to execute arbitrary code with system privileges...

Apple iOS Mobile Replayer Arbitrary Code Execution Vulnerability (CNVD-2015-08187)

Apple iOS is an operating system developed by Apple for use in cell phones and other devices. A path-checking vulnerability exists in the Apple iOS Mobile Replayer handling, which could be exploited by an attacker to execute arbitrary code with system privileges...

Apple OS X dyld Path Checksum Vulnerability

Apple OS X is a BSD-based operating system distributed by Apple. A path-checking vulnerability in Apple OS X dyld allows local users to execute arbitrary code with system privileges...

java-1_7_0-openjdk: Update to icedtea-2.3.3 (important)

java-170-opendjk was updated to icedtea-2.3.3 bnc785814 Security fixes - S6631398, CVE-2012-3216: FilePermission improved path checking - S7093490: adjust package access in rmiregistry - S7143535, CVE-2012-5068: ScriptEngine corrected permissions - S7158796, CVE-2012-5070: Tighten properties...

Pixaria Gallery 2.3.5 (file) Remote File Disclosure Exploit

Exploit for unknown platform in category web applications =========================================================== Pixaria Gallery 2.3.5 file Remote File Disclosure Exploit =========================================================== ?php iniset"maxexecutiontime",0; printr' || || | || o,7 || . ...

Ilia Alshanetsky FUDForum 1.2.8/1.9.8/2.0.2 - File Disclosure

source: https://www.securityfocus.com/bid/5501/info Reportedly, FUDForum may disclose contents of arbitrary files to attackers. The vulnerability is the result of FUDForum failing to check the path of the file that is being requested. By simply making malicious requests via URI parameters, an...