May 19, 2019—KB4505062 (OS Build 16299.1150)

None None...

May 19, 2019—KB4505064 (OS Build 17134.766)

None None...

May 19, 2019—KB4505055 (OS Build 15063.1808)

None None...

May 19, 2019—KB4505056 (OS Build 17763.504)

None None...

SUSE SLED15 / SLES15 Security Update : cf-cli (SUSE-SU-2019:1220-1)

"This update for cf-cli fixes the following issues : cf-cli was updated: to version 6.43.0 bsc1132242 Enhancements : cf curl supports a new --fail flag primarily for scripting purposes which returns exit code 22 for server errors story Improves cf delete-orphaned-routes such that it uses a...

EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1334)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented,...

EulerOS 2.0 SP2 : php (EulerOS-SA-2019-1332)

According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented,...

Design/Logic Flaw

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

CVE-2019-11513

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

CVE-2019-11513

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

CVE-2019-11513

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

CVE-2019-11513: Improper Neutralization of Input During Web Page Generation

The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...

April 25, 2019—KB4498375 (OS Build 10240.18187)

None None...

Update for Windows 10, version 1607 and Windows Server 2016: April 25, 2019

None None...

CVE-2019-7174

Roxy Fileman 1.4.5 allows attackers to execute renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File operations...

PHP 7.2.x < 7.2.16 Multiple vulnerabilities.

According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.16. It is, therefore, affected by multiple vulnerabilities: - Uninitialized reads in the EXIF component of PHP due to the mishandling of data in exifprocessIFDinMAKERNOTE, and exifprocessIFDinTIFF...

[SECURITY] Fedora 29 Update: ntfs-3g-2017.3.23-11.fc29

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

A vulnerability in the tmpreaper software exists due to the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to increase their privileges.

The vulnerability in the tmpreaper software is related to the behavior during mounting through the rename function. Exploiting this vulnerability can allow a hacker to enhance their privileges or place files in any arbitrary location within the file system hierarchy...

Debian DLA-1741-1 : php5 security update

Several vulnerabilities have been found in php5, a server-side, HTML-embedded scripting language. CVE-2019-9637 rename across the device may allow unwanted access during processing. CVE-2019-9638, CVE-2019-9639 Uninitialized read in exifprocessIFDinMAKERNOTE. CVE-2019-9640 Invalid Read on...

The vulnerability of the ext4_xattr_set_entry() function in the Linux operating system allows a hacker to cause a service failure.

The vulnerability of the ext4xattrsetentry function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure during the renaming of a file in a specially created ext4 file system image...