CVE-2018-1092

The ext4iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero ilinkscount, which allows attackers to cause a denial of service ext4processfreeddata NULL pointer dereference and OOPS via a crafted ext4 image...

UBUNTU-CVE-2018-1092

The ext4iget function in fs/ext4/inode.c in the Linux kernel through 4.15.15 mishandles the case of a root directory with a zero ilinkscount, which allows attackers to cause a denial of service ext4processfreeddata NULL pointer dereference and OOPS via a crafted ext4 image...

PT-2018-1243 · Linux +5 · Linux Kernel +5

Name of the Vulnerable Software and Affected Versions: Linux kernel versions through 4.15.15 Description: The issue is related to the ext4 iget function in the Linux kernel, which mishandles a specific case involving a root directory with a zero i links count. This can be exploited by attackers t...

ZZIPlib Bus Error Vulnerability

ZZIPlib is a lightweight used to extract files from the ZIP file to read the C language package , but also can be used to compress multiple files into zip format . A bus error vulnerability exists in the zzipparserootdirectory function in zip.c in ZZIPlib 0.13.68. An attacker could cause a denial...

DEBIAN-CVE-2018-7726

An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the zzipparserootdirectory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-7726

An issue was discovered in ZZIPlib 0.13.68. There is a bus error caused by the zzipparserootdirectory function of zip.c. Attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

DEBIAN-CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

UBUNTU-CVE-2018-6869

In ZZIPlib 0.13.68, there is an uncontrolled memory allocation and a crash in the zzipparserootdirectory function of zzip/zip.c. Remote attackers could leverage this vulnerability to cause a denial of service via a crafted zip file...

NetBSD virecover Script Denial of Service Vulnerability

NetBSD is a BSD-based UNIX-like operating system. A denial of service vulnerability exists in the NetBSD virecover script. An attacker can exploit this vulnerability to delete any file in the root directory of the target system, resulting in a DOS condition...

The vulnerability of IBM DB2 database management systems, including IBM DB2 Connect (and IBM DB2 Connect servers), is related to deficiencies in access control. This allows attackers to gain access to the root directory.

The vulnerabilities of IBM DB2 database management systems, including IBM DB2 Connect and the IBM DB2 Connect server, are related to deficiencies in access control. Exploiting these vulnerabilities could allow an attacker, operating locally, to gain access to the root directory...

Arbitrary file deletion vulnerability in template_deal.php file in OTCMS PHP version

OTCMS PHP version is a news/article publishing website using PHP+sqlite/mysql. An arbitrary file deletion vulnerability exists in the OTCMS PHP version v2.73 templatedeal.php file. An attacker can use this vulnerability to delete any file in the root directory of the website, resulting in a syste...

The vulnerability lies in the built-in procedure executed by the system during the loading of the automation software for Application Policy Infrastructure Controller. This vulnerability allows a perpetrator to increase their privileges, gain access to root directories, and exercise full control over the device.

The vulnerability of the built-in procedure for executing system files during the installation of the Application Policy Infrastructure Controller software relates to deficiencies in access control. Exploiting this vulnerability could allow an attacker, operating locally, to increase their...

PT-2017-13471 · D Link · D-Link Dir-850L

Name of the Vulnerable Software and Affected Versions: D-Link DIR-850L REV. A versions through FW114WWb07 h2ab beta1 D-Link DIR-850L REV. B versions through FW208WWb02 Description: The issue concerns the permissions of the /var/run/storage account root directory, which has 0666 permissions...

The vulnerability of the Junos operating system, allowing a hacker to inject code into the root directory

The vulnerability of the Junos operating system arises from buffer overflows. Exploiting this vulnerability allows a local attacker, who has only read access and permission to the Junos CLI configuration, to inject code into the root directory, thereby enhancing their privileges...

Haida Digital Cloud HD modeling, HD 3LS SCENE suffer from authorization-free authentication execution vulnerability

HD 3LS Scene Haida 3D laser point cloud processing software is a point cloud processing platform software. Haida Digital Cloud HD modeling, HD 3LS SCENE there is no authorization verification execution vulnerability, program startup requires .lic format file as the authorization file for...

SurgeNews User Credentials

This module exploits a vulnerability in the WebNews web interface of SurgeNews on TCP ports 9080 and 8119 which allows unauthenticated users to download arbitrary files from the software root directory; including the user database, configuration files and log files. This module extracts the...

UBUNTU-CVE-2016-10118

Firejail allows local users to truncate /etc/resolv.conf via a chroot command to /...

Path Traversal

Web applications occasionally use parameter values to store the location of a file which will later be required by the server. An example of this is often seen in error pages, where the actual file path for the error page is stored in a parameter value -- for example...

File upload vulnerability in PHPCMS Content Publishing Management function module

PHPCMS is a website management software. The software adopts modular development and supports a variety of classification methods, using it can easily realize the design, development and maintenance of personalized websites. There is a file upload vulnerability in the PHPCMS content publishing...

Command Execution Vulnerability in NetSense Information Security Audit System

NetShen Security Audit System is a hardened computer that can defend against attacks with strong security protection. NetShen Security Audit System is capable of blocking illegal access and malicious attacks, blocking illegal commands, and filtering out all illegal access behaviors to target...