3279 matches found
CVE-2019-3786 BBR could run arbitrary scripts on deployment VMs
Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the authenticity of backup scripts in BOSH. A remote authenticated malicious user can modify the metadata file of a Bosh Backup and Restore job to request extra backup files from different jobs upon restore. Th...
CVE-2019-3786: BBR could run arbitrary scripts on deployment VMs | Cloud Foundry
Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions BOSH Backup and Restore All versions prior to v1.5.0 Description Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the authenticity of backup scripts in BOSH. A remote...
Design/Logic Flaw
The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability...
CVE-2017-18110
The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability...
PT-2019-5325 · Bwa +1 · Bwa +1
Name of the Vulnerable Software and Affected Versions: BWA versions prior to 2019-01-23 Description: The issue is related to a stack-based buffer overflow in the bns restore function in bntseq.c via a long sequence name in a .alt file. This can potentially allow a remote attacker to cause a denia...
UBUNTU-CVE-2019-10269
BWA aka Burrow-Wheeler Aligner before 2019-01-23 has a stack-based buffer overflow in the bnsrestore function in bntseq.c via a long sequence name in a .alt file...
CVE-2018-19512
In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory...
CVE-2019-3919
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usbrestoreForm?script/...
February 19, 2019—KB4487016 (Preview of Monthly Rollup)
None None...
February 19, 2019—KB4486565 (Preview of Monthly Rollup)
None None...
February 19, 2019—KB4487024 (Preview of Monthly Rollup)
None None...
February 19, 2019—KB4487022 (Preview of Monthly Rollup)
None None...
Description of the update for Windows Server 2012: February 19, 2019
Description of the update for Windows Server 2012: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once before. The error...
Description of the update for Windows Server 2008 SP2: February 19, 2019
Description of the update for Windows Server 2008 SP2: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once before. The erro...
Description of the update for Windows 8.1 and Windows Server 2012 R2: February 19, 2019
Description of the update for Windows 8.1 and Windows Server 2012 R2: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once...
Description of the update for Windows 7 SP1 and Windows Server 2008 R2: February 19, 2019
Description of the update for Windows 7 SP1 and Windows Server 2008 R2: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once...
February 12, 2019—KB4487025 (Monthly Rollup)
None None...
runc security update
1.0.0-19.rc5.git4bb1fe4.0.3.el7 - Apply patch for CVE-2019-5736 Wiekus Beukes 1.0.0-19.rc5.git4bb1fe4.0.2.el7 - update Go version to 1.10.8, fix version string Laszlo Laca Peter 1.0.0-19.rc5.git4bb1fe4.0.1.el7 - Tuning .spec file 2:1.0.0-19.rc5.git4bb1fe4 - release v1.0.0rc5...
IDenticard PremiSys (Update A)
1. EXECUTIVE SUMMARY CVSS v3 8.8 ATTENTION: Exploitable remotely/low skill level to exploit/vulnerability details have been publicly disclosed Vendor: IDenticard Equipment: PremiSys Vulnerabilities: Use of Hard-coded Credentials, Use of Hard-coded Password, Inadequate Encryption Strength 2...
