7410 matches found
CVE-2020-7653
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
Code injection
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
CVE-2020-7653
All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal network by creating symlinks to match whitelisted paths...
Arbitrary File Read
Overview snyk-broker is a package that proxies access between snyk.io and your Git repositories, such as GitHub Enterprise, GitHub.com and Bitbucket Server. Snyk Broker can also be used to enable a secure connection with your on-premise Jira deployment. Affected versions of this package are...
HTTP Suspicious Windows Paths
Windows contains important operating system files and sensitive data. A remote attacker may create a malicious HTTP request to obtain sensitive information...
ownCloud: File System Monitoring Queue Overflow
in the source code "owncloud/client" in the file "src/gui/folderwatcherlinux.cpp" in the function "void FolderWatcherPrivate :: inotifyRegisterPath const QString & path" by calling "inotifyaddwatch" the file paths are set for monitoring cpp int wd = inotifyaddwatchfd, path.toUtf8.constData,...
CVE-2020-1081
An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers. An authenticated attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. To exploit this...
Privilege escalation
An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers, aka 'Windows Printer Service Elevation of Privilege Vulnerability'...
CVE-2020-1081 Windows Printer Service Elevation of Privilege Vulnerability
...
Node.js third-party modules: [keyd] Prototype pollution
I would like to report a prototype pollution vulnerability in keyd module. It allows an attacker to inject properties on Object.prototype. Module module name: keyd version: 1.3.4 npm page: https://www.npmjs.com/package/keyd Module Description A small library for using and manipulating key paths i...
CVE-2020-12042
Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access...
Design/Logic Flaw
Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access...
PT-2020-12244
Name of the Vulnerable Software and Affected Versions Opto 22 SoftPAC Project versions 9.6 and prior Description The issue arises because SoftPAC does not specify the path of multiple imported .dll files, allowing an attacker to replace them and execute code whenever the service starts...
HTTP Suspicious Linux Tilde Paths
Linux tilde is a directory that represent the home directory of any currently active user. A remote attacker may create a malicious HTTP request to obtain sensitive information...
Windows Printer Service Elevation of Privilege Vulnerability
An elevation of privilege vulnerability exists when the Windows Printer Service improperly validates file paths while loading printer drivers. An authenticated attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. To exploit this...
Tampering Vulnerability
GIt is vulnerable to a tampering vulnerability. It exists when Git for Visual Studio improperly handles virtual drive paths...
CVE-2020-12649
Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths...
CVE-2020-12649
Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths...
