GSD-2021-1000075 cifs: fix regression when mounting shares with prefix paths

cifs: fix regression when mounting shares with prefix paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.12.3 by commit...

GSD-2021-1000112 cifs: fix regression when mounting shares with prefix paths

cifs: fix regression when mounting shares with prefix paths This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.11.20 by commit...

WS-2021-0248

Linux/Kernel in versions v5.13-rc1 to v5.13-rc2 is vulnerable to memory leak in error handling paths...

PT-2021-28960

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 4.20 through 5.12.6 Description A memory leak was discovered in error handling paths. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions 4.20 through 5.12.6, upda...

WS-2021-0247

Linux/Kernel in versions v5.13-rc1 to v5.13-rc2 is vulnerable to possible memory leak in error handling paths...

PT-2021-24978

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions prior to v5.10.40 Description: A memory leak was discovered in error handling paths. The actual impact and attack plausibility have not yet been proven. Recommendations: For Linux Kernel versions prior to v5.10.40, updat...

PT-2021-28579

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.11.20 Description A regression issue exists when mounting shares with prefix paths. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to...

PT-2021-28972

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.10.40 Description A memory leak was discovered in error handling paths. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel versions prior to v5.10.40, update t...

CVE-2021-29492

Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences %2F and %5C in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path with escaped slashes, e.g. /something%2F..%2Fadmin, to bypass access control, e.g. a block on /admin. A...

CVE-2021-29492

Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences "%2F" and "%5C" in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path with escaped slashes, e.g. "/something%2F..%2Fadmin", to bypass access control, e.g. a block on...

CVE-2021-29492: Improper Limitation of a Pathname to a Restricted Directory

Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences %2F and %5C in HTTP URL paths in versions 1.18.2 and before. A remote attacker may craft a path with escaped slashes, e.g. /something%2F..%2Fadmin, to bypass access control, e.g. a block on /admin. A...

DEBIAN-CVE-2021-31153

please before 0.4 allows a local unprivileged attacker to gain knowledge about the existence of files or directories in privileged locations via the searchpath function, the --check option, or the -d option...

CVE-2021-23387

The package trailing-slash before 2.0.1 are vulnerable to Open Redirect via the use of trailing double slashes in the URL when accessing the vulnerable endpoint such as https://example.com//attacker.example/. The vulnerable code is in index.js::createTrailing, as the web server uses relative URLs...

MetInfo path traversal vulnerability

MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...

Codiad 2.8.4 - Remote Code Execution (Authenticated) Exploit

Exploit Title: Codiad 2.8.4 - Remote Code Execution Authenticated 2 Exploit Author: Ron Jost Hacker5preme Credits to: https://herolab.usd.de/security-advisories/usd-2019-0049/ Tobias Neitzel Vendor Homepage: http://codiad.com/ Software Link: https://github.com/Codiad/Codiad/releases/tag/v.2.8.4...

github.com/unknwon/cae Path Traversal vulnerability

The ExtractTo function doesn't securely escape file paths in zip archives which include leading or non-leading "..". This allows an attacker to add or replace files system-wide...

cpio: improper input validation when writing tar header fields leads to unexpected tar generation

It was discovered cpio does not properly validate input files when generating TAR archives. When cpio is used to create TAR archives from paths an attacker can write to, the resulting archive may contain files with permissions the attacker did not have or in paths he did not have access to...

CVE-2020-15279

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research...

CVE-2020-15279

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research...

Improper access control

An Improper Access Control vulnerability in the logging component of Bitdefender Endpoint Security Tools for Windows versions prior to 6.6.23.320 allows a regular user to learn the scanning exclusion paths. This issue was discovered during external security research...