CVE-2022-0377

Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the...

PT-2022-13138 · WordPress · Learnpress

Name of the Vulnerable Software and Affected Versions: LearnPress WordPress plugin versions prior to 4.1.5 Description: The issue allows users to upload an image as a profile avatar after registration, which is then cropped and saved. A "POST" request is sent to the server to rename and crop the...

CVE-2022-0377: Use of a Broken or Risky Cryptographic Algorithm

Users of the LearnPress WordPress plugin before 4.1.5 can upload an image as a profile avatar after the registration. After this process the user crops and saves the image. Then a "POST" request that contains user supplied name of the image is sent to the server for renaming and cropping of the...

CVE-2021-20321

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system...

DEBIAN-CVE-2021-20321

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system...

CVE-2021-20321

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system...

CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

Input validation

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

CVE-2021-26613 tobesoft nexacro arbitrary file creation vulnerability

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

CVE-2021-26613: Improper Input Validation

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

Tobesoft Nexacro 输入验证错误漏洞

Tobesoft Nexacro is a unified framework-based OSMU single-source multi-purpose application development solution from Tobesoft Corporation in South Korea. An input validation error vulnerability exists in Tobesoft nexacro, which can be exploited by an attacker to copy files to the startup folder...

PT-2022-2027 · Oracle · Oracle Solaris

Name of the Vulnerable Software and Affected Versions: illumos versions before f859e7171bb5db34321e45585839c6c3200ebb90 OmniOS Community Edition version r151038 OpenIndiana Hipster version 2021.04 SmartOS version 20210923 Oracle Solaris versions 10 and 11 Description: A local unprivileged user ca...

CVE-2022-21696

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the username to that of another chat participant with an additional space character at the end of the nam...

PT-2022-15048

Name of the Vulnerable Software and Affected Versions OnionShare versions 2.4 and earlier Description OnionShare is an open source tool that lets users securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions, it is possible to change...

CVE-2022-21696: Improper Input Validation

OnionShare is an open source tool that lets you securely and anonymously share files, host websites, and chat with friends using the Tor network. In affected versions it is possible to change the username to that of another chat participant with an additional space character at the end of the nam...

CVE-2021-31833

Potential product security bypass vulnerability in McAfee Application and Change Control MACC prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by...

CVE-2021-31833

Potential product security bypass vulnerability in McAfee Application and Change Control MACC prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by...

CVE-2021-31833: Improper Privilege Management

Potential product security bypass vulnerability in McAfee Application and Change Control MACC prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting them to run applications that would usually be prevented by...

kernel: In Overlayfs missing a check for a negative dentry before calling vfs_rename()

A race condition accessing file object in the Linux kernel OverlayFS subsystem was found in the way users do rename in specific way with OverlayFS. A local user could use this flaw to crash the system...