Design/Logic Flaw

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

Information Disclosure

conga is vulnerable to information disclosure. An attacker is able to retrieve passwords from the source file of the web page as the passwords are found in the Value attribute of a password entry field...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

UBUNTU-CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19796

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

PT-2019-15964

Name of the Vulnerable Software and Affected Versions Yabasic version 2.86.2 Description A heap-based buffer overflow issue exists in the myformat function within function.c due to a crafted BASIC source file. Recommendations For Yabasic version 2.86.2, at the moment, there is no information abou...

CVE-2019-19796: Out-of-bounds Write

Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...

CVE-2019-19720

Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file...

CVE-2019-19720

Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file...

CVE-2019-19720

Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file...

PT-2019-15926

Name of the Vulnerable Software and Affected Versions Yabasic version 2.86.1 Description A heap-based buffer overflow issue exists in the yylex function, located in flex.c, which can be triggered by a crafted BASIC source file. Recommendations For Yabasic version 2.86.1, consider avoiding the use...

CVE-2019-19720: Out-of-bounds Write

Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file...

CVE-2011-0703

In gksu-polkit before 0.0.3, the source file for xauth may contain arbitrary commands that may allow an attacker to overtake an administrator X11 session...

CVE-2007-6672

Mortbay Jetty 6.1.5 and 6.1.6 allows remote attackers to bypass protection mechanisms and read the source of files via multiple '/' slash characters in the URI...

Nevma Adaptive Images File Inclusion Vulnerability

WordPress plugin Adaptive Images is used to serve images in Wordpress based on device resolution, allowing dynamic resizing. A file inclusion vulnerability exists in WordPress plugin Adaptive Images versions prior to 0.6.67. An attacker can exploit this vulnerability to retrieve arbitrary files v...

PT-2019-13529

Name of the Vulnerable Software and Affected Versions Nevma Adaptive Images plugin versions prior to 0.6.67 Description A Local File Inclusion issue allows remote attackers to retrieve arbitrary files. This is achieved via the adaptive-images-settings parameter, specifically through the source fi...