6456 matches found
CVE-2020-13696
An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...
CVE-2020-13696
An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...
CVE-2020-13696
An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...
CVE-2020-13696
The CVE-2020-13696 issue affects LinuxTV xawtv before 3.107. The dev_open() function in v4l-conf.c fails to sufficiently validate the target path, enabling a local attacker with access to the setuid-root v4l-conf binary to probe for file existence and trigger opens on arbitrary files (e.g., via a...
CVE-2020-13696
An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...
CVE-2020-13696
An issue was discovered in LinuxTV xawtv before 3.107. The function devopen in v4l-conf.c does not perform sufficient checks to prevent an unprivileged caller of the program from opening unintended filesystem paths. This allows a local attacker with access to the v4l-conf setuid-root program to...
Bitdefender Antivirus Free Backlink Vulnerability
Bitdefender Antivirus Free is a free version of the Romanian company Bitdefender's suite of antivirus programs that provide mainly cyber threat detection and ransomware protection. A backlink vulnerability exists in versions prior to Bitdefender Antivirus Free 1.0.17.178, which stems from the...
Arbitrary File Read in Snyk Broker
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
GHSA-4VJ3-F849-5R48 Arbitrary File Read in Snyk Broker
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
FarSite Communications FarLinX X25 Gateway Directory Traversal Vulnerability
FarSite Communications FarLinX X25 Gateway is a gateway product from FarSite Communications, UK. It features a browser interface, online statistics set, connection logging, active session display and status change alerts. A directory traversal vulnerability exists in FarSite Communications FarLin...
June 2, 2020, update for Office 2016 (KB4484335)
None None...
Lexiglot Path Traversal Vulnerability
Lexiglot is a translation platform written in PHP by the French software developer Damien Sorel. A path traversal vulnerability exists in Lexiglot 2014-11-20 and earlier versions, which can be exploited by remote attackers to obtain sensitive information full path with the help of...
Arbitrary File Read
snyk-broker is vulnerable to arbitrary file read. Users with access to Snyk's internal network are able to read arbitrary files by renaming the files to match whitelisted paths...
snyk-broker information disclosure vulnerability (CNVD-2020-53548)
snyk-broker is a proxy program for access between snyk.io and Git repositories. An information disclosure vulnerability exists in snyk-broker versions prior to 4.80.0. An attacker can exploit this vulnerability by creating symbolic links matching whitelisted paths to read arbitrary files on the...
CVE-2020-7653
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
CVE-2020-7653
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
Code injection
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
CVE-2020-7653
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
Arbitrary File Read
Overview snyk-broker is a package that proxies access between snyk.io and your Git repositories, such as GitHub Enterprise, GitHub.com and Bitbucket Server. Snyk Broker can also be used to enable a secure connection with your on-premise Jira deployment. Affected versions of this package are...
