4642 matches found
CVE-2019-11503: Improper Link Resolution Before File Access
snap-confine as included in snapd before 2.39 did not guard against symlink races when performing the chdir to the current working directory of the calling user, aka a "cwd restore permission bypass."...
CVE-2019-3786: Improper Privilege Management
Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the authenticity of backup scripts in BOSH. A remote authenticated malicious user can modify the metadata file of a Bosh Backup and Restore job to request extra backup files from different jobs upon restore. Th...
CVE-2019-3786: BBR could run arbitrary scripts on deployment VMs | Cloud Foundry
Severity High Vendor Cloud Foundry Foundation Affected Cloud Foundry Products and Versions BOSH Backup and Restore All versions prior to v1.5.0 Description Cloud Foundry BOSH Backup and Restore CLI, all versions prior to 1.5.0, does not check the authenticity of backup scripts in BOSH. A remote...
CVE-2017-18110
The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability...
Design/Logic Flaw
The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability...
PT-2019-5325
Name of the Vulnerable Software and Affected Versions BWA versions prior to 2019-01-23 Description The issue is related to a stack-based buffer overflow in the bns restore function in bntseq.c via a long sequence name in a .alt file. This can potentially allow a remote attacker to cause a denial ...
PT-2019-8259
Name of the Vulnerable Software and Affected Versions Atlassian Crowd versions prior to 3.0.2 Atlassian Crowd versions 3.1.0 through 3.1.0 Description The issue allows remote attackers to read files from the filesystem via a XXE vulnerability, which occurs in the administration backup restore...
CVE-2017-18110: Improper Restriction of XML External Entity Reference
The administration backup restore resource in Atlassian Crowd before version 3.0.2 and from version 3.1.0 before version 3.1.1 allows remote attackers to read files from the filesystem via a XXE vulnerability...
UBUNTU-CVE-2019-10269
BWA aka Burrow-Wheeler Aligner before 2019-01-23 has a stack-based buffer overflow in the bnsrestore function in bntseq.c via a long sequence name in a .alt file...
CVE-2018-19512
In Webgalamb through 7.0, a system/ajax.php "wgmfile restore" directory traversal vulnerability could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory...
PT-2019-9844
Name of the Vulnerable Software and Affected Versions Webgalamb versions prior to 7.0 Description A directory traversal vulnerability in system/ajax.php could lead to arbitrary code execution by authenticated administrator users, because PHP files are restored under the document root directory. T...
CVE-2019-3919
The Alcatel Lucent I-240W-Q GPON ONT using firmware version 3FE54567BOZJ19 is vulnerable to command injection via crafted HTTP request sent by a remote, authenticated attacker to /GponForm/usbrestoreForm?script/...
February 19, 2019—KB4487022 (Preview of Monthly Rollup)
None None...
February 19, 2019—KB4486565 (Preview of Monthly Rollup)
None None...
February 19, 2019—KB4487016 (Preview of Monthly Rollup)
None None...
Description of the update for Windows 7 SP1 and Windows Server 2008 R2: February 19, 2019
Description of the update for Windows 7 SP1 and Windows Server 2008 R2: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once...
Description of the update for Windows Server 2012: February 19, 2019
Description of the update for Windows Server 2012: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once before. The error...
Description of the update for Windows Server 2008 SP2: February 19, 2019
Description of the update for Windows Server 2008 SP2: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once before. The erro...
Description of the update for Windows 8.1 and Windows Server 2012 R2: February 19, 2019
Description of the update for Windows 8.1 and Windows Server 2012 R2: February 19, 2019 Summary This update includes the following improvements and fixes: Addresses a known issue where you may experience virtual machines failing to successfully restore if the VM has been saved and restored once...