rubygem-activestorage: circumvention of file size limits in ActiveStorage

A flaw was found in rubygem-activestorage. The ActiveStorage's S3 adapter that allows the Content-Length of a direct file upload to be modified by an end user. The highest threat from this vulnerability is to data integrity...

openSUSE: Security Advisory for ceph (openSUSE-SU-2021:0079-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Virtuozzo Hybrid Infrastructure 4.5 (4.5.0-284)

In this release, Virtuozzo Hybrid Infrastructure provides a wide range of new features that enhance the end-user experience and service providers' interoperability. The improvements cover compute services, networking, storage core, monitoring, and the administrative user interface. Additionally,...

openSUSE Security Update : ceph (openSUSE-2021-79)

This update for ceph fixes the following issues : Security issues fixed : - CVE-2020-27781: Fixed a privilege escalation via the cephvolumeclient Python interface bsc1179802 bsc1180155. Non-security issues fixed : - Fixes an issue when check in legacy collection reaches end. bsc1179139 - Fixes an...

360 Secure Cloud Drive Windows interface version suffers from dll hijacking vulnerability (CNVD-2021-10428)

360 Secure Cloud Disk is a product that provides cloud storage and file sharing services for a wide range of real-name personal and business users. 360 Secure Cloud Disk Windows interface version of the dll hijacking vulnerability, attackers can use the vulnerability to cause the user's computer ...

SkyCloud disk PC client for windows has dll hijacking vulnerability

Tianyi Cloud Drive is a cloud storage service product launched by China Telecom for individual and family users, positioning itself as a "data center for individuals and families", and providing cloud storage services such as cell phone album backup, multi-end file sharing, family album sharing,...

Security update for ceph (moderate)

openSUSE Security Update: Security update for ceph Announcement ID: openSUSE-SU-2021:0079-1 Rating: moderate References: 1178837 1179139 1179452 1179802 1180118 1180155 Cross-References: CVE-2020-27781 Affected Products: openSUSE Leap 15.1 An update that solves one vulnerability and has 5 fixes i...

SUSE SLED15 / SLES15 Security Update : ceph (SUSE-SU-2021:0023-1)

This update for ceph fixes the following issues : Security issues fixed : CVE-2020-27781: Fixed a privilege escalation via the cephvolumeclient Python interface bsc1179802 bsc1180155. Non-security issues fixed : Fixes an issue when check in legacy collection reaches end. bsc1179139 Fixes an issue...

SUSE-SU-2021:0023-1 Security update for ceph

This update for ceph fixes the following issues: Security issues fixed: - CVE-2020-27781: Fixed a privilege escalation via the cephvolumeclient Python interface bsc1179802 bsc1180155. Non-security issues fixed: - Fixes an issue when check in legacy collection reaches end. bsc1179139 - Fixes an...

Command Injection

Overview s3-kilatstorage is a S3 client for NodeJs 8.X or greater. KilatStorageS3 uses a bash command to run s3cmd which has been configured and connected to the kilatstorage service. You can use this package for Amazon S3 service too. Affected versions of this package are vulnerable to Command...

CVE-2020-26816

SAP AS JAVA Key Storage Service, versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access ...

Information disclosure

SAP AS JAVA Key Storage Service, versions - 7.10, 7.11, 7.20 ,7.30, 7.31, 7.40, 7.50, has the key material which is stored in the SAP NetWeaver AS Java Key Storage service stored in the database in the DER encoded format and is not encrypted. This enables an attacker who has administrator access ...

CVE-2020-26816

The CVE-2020-26816 issue affects SAP NetWeaver AS Java Key Storage Service. Key material is stored in DER-encoded format in the database and is not encrypted, enabling an administrator to decode the keys and potentially access application data and client credentials of adjacent systems, impacting...

SAP AS JAVA 安全漏洞

SAP Netweaver is the German SAP SAP company's set of service-oriented integrated application platform. The platform provides a development and runtime environment for SAP applications. An information disclosure vulnerability exists in SAP Netweaver AS JAVA Key Storage Service versions 7.10, 7.11,...

Vertafore data ereach exposes license details of 27.7M Texas drivers

By Deeba Ahmed Vertafore claims the incident resulted from human error since the data was stored on an unprotected external storage service. This is a post from HackRead.com Read the original post: Vertafore data ereach exposes license details of 27.7M Texas drivers...

Product release: Virtuozzo Hybrid Infrastructure 4.0 Hotfix 1 (4.0.0-741)

This update provides bug fixes and improvements. Vulnerability id: VSTOR-38028 The stat command may report wrong size for files with erasure coding. Vulnerability id: VSTOR-37868 Editing an NFS export could set a wrong SecType and prevent the export from being mounted. Vulnerability id:...

The vulnerability of the Windows Storage Services data storage service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to errors in memory object handling. Exploiting this vulnerability can allow an attacker to increase their privileges through a specially created application...

The vulnerability of the Windows Storage Services data storage service on Windows operating systems allows attackers to exploit their privileges.

The vulnerability of the Windows Storage Services data storage service in Windows operating systems is related to file operation processing errors. Exploiting this vulnerability can allow attackers to enhance their privileges through a specially created application...

The vulnerability of the Storage Service component of the Windows operating system, which allows a hacker to increase their privileges

The vulnerability of the Windows operating system’s Storage Service component is related to insecure management of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges through a specially created application...

CVE-2020-1490

An elevation of privilege vulnerability exists when the Storage Service improperly handles file operations. An attacker who successfully exploited this vulnerability could gain elevated privileges on the victim system. To exploit the vulnerability, an attacker would first have to gain execution o...