EUVD-2022-6519

Malicious code in bioql PyPI...

GHSA-RM8P-CX58-HCVX vulnerabilities

Vulnerabilities for packages: kubeflow-centraldashboard, lerna, saf...

GHSA-RM8P-CX58-HCVX vulnerabilities

Vulnerabilities for packages: lerna, saf, kubeflow-centraldashboard...

Path Traversal

org.dspace, dspace-api is vulnerable to path traversal. The vulnerability is due to improper validation of file paths in the Simple Archive Format SAF importer, which allows an attacker to craft a malicious SAF package referencing arbitrary system files...

PT-2025-29569 · Dspace · Dspace

Name of the Vulnerable Software and Affected Versions: DSpace versions prior to 7.6.4 DSpace versions prior to 8.2 DSpace versions prior to 9.1 Description: DSpace is a repository application providing access to digital resources. A path traversal issue exists during the import of an archive in...

PT-2026-3076

Name of the Vulnerable Software and Affected Versions GPAC version 2.4.0 Description A stack overflow exists in the dmx saf function of GPAC. This flaw can be triggered by processing a specially crafted .saf file, potentially leading to a Denial of Service DoS. Recommendations Update to a newer...

CVE-2022-4529

The Security, Antivirus, Firewall – S.A.F plugin for WordPress is vulnerable to IP Address Spoofing in versions up to, and including, 2.3.5. This is due to insufficient restrictions on where the IP Address information is being retrieved for request logging and login restrictions. Attackers can...

saf-t.pt Cross Site Scripting vulnerability OBB-3075754

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import

Impact ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be created anywhere the Tomcat/DSpace user can write to on the server. However, this path traversal vulnerability is only possible...

Path Traversal

org.dspace:dspace-api is vulnerable to path traversal. A privileged attacker is able to create a file or a directory anywhere on the server within the user scope via a specifically crafted SAF package...

Path traversal

DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be...

CVE-2021-44232

SAF-T Framework Transaction SAFTNG allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server...

Input validation

SAF-T Framework Transaction SAFTNG allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server...

CVE-2021-44232

CVE-2021-44232 affects the SAP SAF-T Framework Transaction SAFTN_G. The issue is insufficient validation of path information provided by normal users, enabling a path-traversal that allows an attacker to view the entire server filesystem structure (full directory access) without ability to overwr...

CVE-2021-44232

SAF-T Framework Transaction SAFTNG allows an attacker to exploit insufficient validation of path information provided by normal user, leading to full server directory access. The attacker can see the whole filesystem structure but cannot overwrite, delete, or corrupt arbitrary files on the server...

The vulnerability of the setsystemparams procedure of the Ghostscript file conversion program allows a attacker to execute arbitrary commands or gain access to the file system.

The vulnerability of the setsystemparams procedure in the Ghostscript program for converting PostScript format files is related to deficiencies in access control. Exploiting this vulnerability allows an attacker, operating remotely, to execute arbitrary commands or gain access to the file system ...

The vulnerability of the Android operating system’s IOCTL handler from the SAF repository, which allows a attacker to trigger a numerical overflow and write beyond the memory boundaries.

The vulnerability of the Android operating system’s IOCTL handler from the CAF repository arises due to synchronization errors when using a shared resource during a race condition. Exploiting this vulnerability can allow an attacker to trigger a full memory overflow and write beyond the memory...

CVE-2014-8664

SQL injection vulnerability in Product Safety EHS-SAF component in SAP Environment, Health, and Safety Management allows remote attackers to execute arbitrary SQL commands via unspecified vectors...

CVE-2014-8664

Technical details about CVE-2014-8664 are not publicly available in the provided connected documents. No explicit information on affected versions, root cause, or fixes is disclosed here. Monitor for updates and additional sources to obtain concrete details.

Cisco Unified Communications Manager / Cisco Intercompany Media Engine / Cisco TelePresence Codecs DoS

Crash on Service Advertisement Framework SAF packet parsing, crash on SIP processing, connection flood DoS...