57 matches found
PT-2023-32832
Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided descriptions. Description This issue allows writing arbitrary files into arbitrary locations on the remote filesystem in the context of the server process. Recommendations At the...
CVE-2023-4152
Frauscher Sensortechnik GmbH FDS101 for FAdC/FAdCi v1.4.24 and all previous versions are vulnerable to a path traversal vulnerability of the web interface by a crafted URL without authentication. This enables an remote attacker to read all files on the filesystem of the FDS101 device...
CVE-2022-29943
Talend Administration Center has a vulnerability that allows an authenticated user to use XML External Entity XXE processing to achieve read access as root on the remote filesystem. The issue is fixed for versions 8.0.x in TPS-5189, versions 7.3.x in TPS-5175, and versions 7.2.x in TPS-5201...
CVE-2022-29943
CVE-2022-29943 (Talend Administration Center) and CVE-2022-29942 describe authenticated vulnerabilities in Talend Administration Center. The CVE-29943 issue allows XML External Entity (XXE) processing that can read the remote filesystem as root; a separate CVE-29942 concerns SSRF via the Service ...
CVE-2022-24428: Improper Preservation of Permissions
Dell PowerScale OneFS, versions 8.2.x, 9.0.0.x, 9.1.0.x, 9.2.0.x, 9.2.1.x, and 9.3.0.x, contain an improper preservation of privileges. A remote filesystem user with a local account could potentially exploit this vulnerability, leading to an escalation of file privileges and information disclosur...
[SECURITY] Fedora 34 Update: php-league-flysystem-1.1.4-1.fc34
Flysystem is a filesystem abstraction which allows you to easily swap out a local filesystem for a remote one. Autoloader: /usr/share/php/League/Flysystem/autoload.php...
[SECURITY] Fedora 34 Update: nautilus-40~rc-1.fc34
Nautilus is the file manager and graphical shell for the GNOME desktop that makes it easy to manage your files and the rest of your system. It allows to browse directories on local and remote filesystems, preview files and launch applications associated with them. It is also responsible for...
CVE-2016-0911: Undefined Security Weakness
EMC Data Domain OS 5.4 through 5.7 before 5.7.2.0 has a default norootsquash option for NFS exports, which makes it easier for remote attackers to obtain filesystem access by leveraging client root privileges...
Microsoft Windows Graphics Component Information Disclosure (MS16-055: CVE-2016-0168)
A Vulnerability was discovered within Internet explorer when handling a spcially crafted EMF file allowing an information disclosure about the user filesystem. The root cause of the vulnerability is related to the CreateColorSpaceW function that tries to build a file path checking of its existanc...
RHEL 5 : JBoss EAP (RHSA-2013:1784)
An update for Red Hat JBoss Enterprise Application Platform 6.2.0, which fixes two security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. The Red Hat Security Response Team has rated this update as having low security impact. Common...
HP StorageWorks File Migration Agent Unauthorized Access
The remote HP StorageWorks File Migration Agent does not have any integrated authentication mechanism. An attacker can exploit this issue to modify archives and retrieve credentials. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Microsoft Windows Vista - 'lpksetup.exe oci.dll' DLL Loading Arbitrary Code Execution
// source: https://www.securityfocus.com/bid/44414/info Microsoft Windows 'lpksetup.exe' is prone to a vulnerability that lets attackers execute arbitrary code. An attacker can exploit this issue by enticing a legitimate user to use the vulnerable application to open a file from a network share...
Gentoo Security Advisory GLSA 200407-16 (Kernel)
The remote host is missing updates announced in advisory GLSA 200407-16. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...
Caucho Resin <= 2.1.2 Information Disclosure Vulnerability
Caucho Resin will reveal the physical path of the webroot when asked for a special DOS device, e.g. lpt9.xtp. SPDX-FileCopyrightText: 2002 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier...
Knox Arkeya backup agent unauthorized access
It's possible to access remote filesystem with Arkeia backup agent installed...
Multiple Security Vulnerabilities in Sharp Zaurus
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Syracuse University Research for Understanding Aspects of the Zaurus Security Advisory SURUAZ-2002-07-07 Center for Systems Assurance http://www.csa.syr.edu Synopsis: The SharpR Zaurustm SL-5000D and SL-5500 have multiple security vulnerabilities in...