UBUNTU-CVE-2020-16094

In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree...

CVE-2020-16094

In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree...

CVE-2020-16094

In imapscantreerecursive in Claws Mail through 3.17.6, a malicious IMAP server can trigger stack consumption because of unlimited recursion into subdirectories during a rebuild of the folder tree...

pdfbox: unbounded computation in parser resulting in a denial of service

In Apache PDFBox 1.8.0 to 1.8.15 and 2.0.0RC1 to 2.0.11, a carefully crafted PDF file can trigger an extremely long running computation when parsing the page tree...

Marked-tree path traversal vulnerability

Marked-tree is a Markdown viewer. A path traversal vulnerability exists in fs.readFile in the index.js file in marked-tree all versions, which stems from the program's failure to clean up paths, and can be exploited by an attacker to gain unauthorized access and overwrite or read arbitrary files...

PT-2020-14746

Name of the Vulnerable Software and Affected Versions Claws Mail versions prior to 3.17.7 Description A malicious IMAP server can cause stack consumption in Claws Mail due to unlimited recursion into subdirectories during a rebuild of the folder tree. This occurs in the imap scan tree recursive...

Directory Traversal

marked-tree is vulnerable to directory traversal. Lack of sanitization of the file path allows an attacker to access arbitrary system files outside of the web root...

CVE-2020-7682

This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js...

CVE-2020-7682

This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js...

CVE-2020-7682

CVE-2020-7682 concerns all versions of the npm package marked-tree, with no path sanitization in fs.readFile called from index.js. The connected Snyk entry confirms a Directory Traversal vulnerability that can read arbitrary files outside the web root and provides a PoC demonstrating traversal vi...

CVE-2020-7682

This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js...

PT-2020-19705

Name of the Vulnerable Software and Affected Versions marked-tree versions prior to 0.8.2 Description The issue is related to a lack of path sanitization in the path provided at fs.readFile in index.js. This could potentially lead to unauthorized access to files. Recommendations For versions prio...

CVE-2020-7682: Improper Limitation of a Pathname to a Restricted Directory

This affects all versions of package marked-tree. There is no path sanitization in the path provided at fs.readFile in index.js...

TYPO3 9.x < 9.5.6 Information Disclosure

The version of TYPO3 installed on the remote host is 9.x prior to 9.5.6. It is, therefore, affected by information disclosure vulnerabilities in its login & page tree components due to a failure to properly restrict access to sensitive information. An authenticated, remote attacker can exploit...

Leak Exposes Private Data of Genealogy Service Users

A server containing information of users of a genealogy service has exposed the data of 60,000 users, putting them at risk for fraud, phishing and other cybercriminal activity. Research led by Avishai Efrat at WizCase has discovered the leak, which affected an open and unencrypted ElasticSearch...

PT-2020-21703

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A heap-use-after-free READ 4 crash type has been identified, involving the node min byte len, tune quant, and tune tree functions. Recommendations At the...

PT-2020-21831

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned in the provided description. Description A crash has been reported with an UNKNOWN READ crash type. The crash state involves std:: 1:: tree and std:: 1::map, indicating an issue related to the...

Important: Red Hat Security Advisory: kernel security, bug fix, and enhancement update

An update for kernel is now available for Red Hat Enterprise Linux 7.7 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

NewStart CGSL MAIN 6.01 : sqlite Multiple Vulnerabilities (NS-SA-2020-0031)

The remote NewStart CGSL host, running version MAIN 6.01, has sqlite packages installed that are affected by multiple vulnerabilities: - SQLite3 from 3.6.0 to and including 3.27.2 is vulnerable to heap out-of-bound read in the rtreenode function when handling invalid rtree tables. CVE-2019-8457 -...

EulerOS Virtualization 3.0.6.0 : sqlite (EulerOS-SA-2020-1764)

According to the versions of the sqlite packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - osunix.c in SQLite before 3.13.0 improperly implements the temporary directory search algorithm, which might allow local users to...