Splunk 路径遍历漏洞

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index, and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines, and cloud. A path...

SUSE SLES12 Security Update : subversion (SUSE-SU-2022:1483-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:1483-1 advisory. - Apache Subversion SVN authz protected copyfrom paths regression Subversion servers reveal 'copyfrom' paths that should be hidden...

Improper Input Validation

Overview Affected versions of this package are vulnerable to Improper Input Validation by not validating that the expanded path matches publicdir when serving static files. Remediation Upgrade sinatra to version 2.2.0 or higher. References - GitHub Commit - GitHub PR...

GHSA-QG4G-6JCQ-RW93 Jakarta Apache Tomcat Reveals Physical Paths

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path...

Jakarta Apache Tomcat Reveals Physical Paths

Jakarta Tomcat 3.1 under Apache reveals physical path information when a remote attacker requests a URL that does not exist, which generates an error message that includes the physical path...

Swapper3Crv's swapping path can be suboptimal

Lines of code Vulnerability details Impact Swapper3Crv.swap result can be suboptimal as only paths with ETH are evaluated. Setting severity to medium as despite function availability not affected there can be some fund losses as a result. Proof of Concept tokenAmountOut uses fixed tokenIn, ETH,...

Controlup Real-Time Agent 代码问题漏洞

Controlup Real-Time Agent is a real-time agent from Controlup USA. A security vulnerability exists in Controlup Real-Time Agent prior to version 8.6, which stems from unquoted paths that may lead to elevation of privilege...

USN-5376-3: Git regression

USN-5376-1 fixed vulnerabilities in Git, some patches were missing to properly fix the issue. This update fixes the problem. Original advisory details: 俞晨东 discovered that Git incorrectly handled certain repository paths in platforms with multiple users support. An attacker could possibly use thi...

PHP Interpreter Null Byte File Access

The vulnerability of the PHP interpreter extension is related to an error in processing paths to files containing the character \x00. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to files or directories...

GSD-2022-1002377 pinctrl: samsung: drop pin banks references on error paths

pinctrl: samsung: drop pin banks references on error paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v4.19.238 by commit...

GSD-2022-1001314 pinctrl: samsung: drop pin banks references on error paths

pinctrl: samsung: drop pin banks references on error paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.17.2 by commit...

Prototype Pollution

Overview convict is a package that expands on the standard pattern of configuring node.js applications in a way that is more robust and accessible to collaborators, who may have less interest in digging through imperative code in order to inspect or modify settings. By introducing a configuration...

PT-2022-29587

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.8 through 5.17.1 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically the Samsung driver. It involves dropping pin banks references on error paths. The actual impact and attack...

PT-2022-29894

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.16.19 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically affecting Samsung pin banks. It involves dropping pin banks references on error paths. The actual impact and...

PT-2022-30199

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.33 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically affecting Samsung pin banks. It involves dropping pin banks references on error paths. The actual impact and...

PT-2022-30415

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.110 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically affecting Samsung pin banks. It involves dropping pin banks references on error paths. The actual impact and...

PT-2022-30552

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.189 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically affecting Samsung pin banks. It involves dropping pin banks references on error paths. The actual impact and...

PT-2022-30650

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.238 Description The issue is related to the pinctrl subsystem in the Linux Kernel, specifically affecting Samsung pin banks. It involves dropping pin banks references on error paths. The actual impact and...

Apache Subversion SVN authz protected copyfrom paths regression

...

Privilege Defined With Unsafe Actions

Overview System.Management.Automation is a System Management Automation for PowerShell. Affected versions of this package are vulnerable to Privilege Defined With Unsafe Actions in the module search paths that will return empty strings for special folders that don't exist in some accounts like...