Apple tvOS 权限许可和访问控制问题漏洞

Apple tvOS is a set of smart TV operating systems from the U.S.-based Apple Inc. A vulnerability exists in a number of Apple products due to a permissions licensing and access control issue that stems from a logic problem. Sandboxing processes may be able to exploit the vulnerability to bypass...

PT-2021-19026 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 15.2 iPadOS versions prior to 15.2 Description: A permissions issue was addressed with improved validation, allowing a malicious application to potentially identify what other applications a user has installed...

Microsoft Windows Media Foundation权限许可和访问控制问题漏洞

Microsoft Windows Media Foundation is a multimedia development library from Microsoft that aims to provide a unified multimedia solution for the Windows platform, allowing developers to play video and sound files, encode audio and video, or transcode multimedia files. Developers can use Media...

SUSE-SU-2021:2413-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2021-32760: Fixed a bug which allows untrusted container images to change permissions in the host's filesystem. bsc1188282...

SUSE-SU-2021:2412-1 Security update for containerd

This update for containerd fixes the following issues: - CVE-2021-32760: Fixed a bug which allows untrusted container images to change permissions in the host's filesystem. bsc1188282...

Microsoft Windows Storage Spaces Controller 权限许可和访问控制问题漏洞

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation USA, Microsoft Windows is an operating system for personal devices, and Microsoft Windows Server is a server operating system. An elevation of privilege vulnerability exists in Storage Spaces Controller in...

Cached content persisting after disabling anonymous access for allowlist URLs - CVE-2021-39113

Affected versions of Atlassian Jira Server and Data Center allow anonymous remote attackers to continue to view cached content even after losing permissions, via a Broken Access Control vulnerability in the allowlist feature. The affected versions are before version 8.13.9, and from version...

Apple iMovie 权限许可和访问控制问题漏洞

Apple iMovie is a video editing software from Apple. A vulnerability exists in iMovie due to a permissions granting and access control issue that arises from improper permissions management. Rights and privacy permissions granted to this application may be used by malicious applications...

CVE-2021-28271

Soyal Technologies SOYAL 701Server 9.0.1 suffers from an elevation of privileges vulnerability which can be used by an authenticated user to change the executable file with a binary choice. The vulnerability is due to improper permissions with the 'F' flag Full for 'Everyone'and 'Authenticated...

Apple macOS 权限许可和访问控制问题漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A vulnerability exists in macOS due to a permissions granting and access control issue, which arises from improper management of permissions within the APFS component. The following products and versions are...

SUSE: Security Advisory (SUSE-SU-2020:3326-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MediaWiki 权限许可和访问控制问题漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. A security vulnerability exists in MediaWiki version 1.31.12 and versions prior to 1.32.x series 1.35.x...

ant: insecure temporary file

As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...

Owncloud 安全漏洞

Owncloud ownCloud is a set of personal cloud storage solutions from the American company ownCloud Owncloud. A security vulnerability exists in versions of OwnCloud prior to 0.15.2, which originates when a user creates a public link to a folder where an anonymous user uploads a file, and another...

SUSE-SU-2021:0197-1 Security update for permissions

This update for permissions fixes the following issues: - Update to version 20181224: pcp: remove no longer needed / conflicting entries bsc1171883, CVE-2020-8025...

SUSE-SU-2020:3878-1 Security update for slurm_17_11

This update for slurm1711 fixes the following issues: - CVE-2020-27745: Fixed potential buffer overflows from use of unpackmem bsc1178890. - CVE-2020-27746: Fixed a potential leak of the magic cookie when sent as an argument to the xauth command bsc1178891. - Fixed %posttrans macro resupdate to...

SUSE SLES12 Security Update : kernel (SUSE-SU-2020:3544-1)

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote...

SUSE SLED15 / SLES15 Security Update : kernel (SUSE-SU-2020:3272-1)

The SUSE Linux Enterprise 15 SP1 kernel was updated to receive various security and bug fixes. The following security bugs were fixed : CVE-2020-25656: Fixed a concurrency use-after-free in vtdokdgkbioctl bnc1177766. CVE-2020-25285: Fixed a race condition between hugetlb sysctl handlers in...

SUSE-SU-2020:3544-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 12 SP4 kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path remote...

SUSE-SU-2020:3484-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 15 SP1 Azure kernel was updated to receive various security and bug fixes. The following security bugs were fixed: - CVE-2020-25705: A flaw in the way reply ICMP packets are limited in was found that allowed to quickly scan open UDP ports. This flaw allowed an off-path...