cve-2023-34446

CVE-2023-36664: Ghostscript 远程代码执行 漏洞摘要 CVE ID: CVE-2023-36664 产品: Ghostscript 10.01.2 漏洞类型: 远程代码执行 RCE 概述 本漏洞 CVE-2023-36664 是由于 Ghostscript 对管道设备（%pipe% 或 | 前缀）的路径权限验证处理不完善而导致的任意代码执行 RCE 漏洞。 攻击者精心构造的恶意文档文件 PS/EPS 在被系统解析或处理的过程中，可在未经用户授权的情况下执行任意系统命令。 概念说明 了解 Ghostscript 与管道 Pipe 1. Ghostscript...

SUSE CVE-2025-0781

An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level...

Privilege Escalation

github.com/opensearch-project/opensearch-cli is vulnerable to Privilege Escalation. The vulnerability exists due to the weak file path permission in the configuration file, allowing an attacker to read or write any file on the file path...

Moderate: Red Hat Security Advisory: java-1.8.0-openjdk security update

An update for java-1.8.0-openjdk is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

CVE-2020-13227

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username under which the web server is running by triggering an invalid path permission error. This bypasses the fakepath protection mechanism...

Design/Logic Flaw

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username under which the web server is running by triggering an invalid path permission error. This bypasses the fakepath protection mechanism...

CVE-2020-13227

CVE-2020-13227 concerns Sysax Multi Server 6.90. The vulnerability arises in the web server component where triggering an invalid path permission error bypasses the fakepath protection, allowing an attacker to determine the username under which the server is running. Affected product: Sysax Multi...

CVE-2020-13227

An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username under which the web server is running by triggering an invalid path permission error. This bypasses the fakepath protection mechanism...