Lucene search
+L

582 matches found

Github Security Blog
Github Security Blog
added 2020/11/04 5:50 p.m.122 views

Local Temp Directory Hijacking Vulnerability

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the...

7CVSS7.7AI score0.04352EPSS
Exploits1References147Affected Software2
RedHat Linux
RedHat Linux
added 2020/11/04 1:48 a.m.37 views

Moderate: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

5.3CVSS6.7AI score0.08153EPSS
Exploits4References4
OSV
OSV
added 2020/11/03 12:33 p.m.32 views

ALSA-2020:4763 Moderate: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

5.3CVSS7AI score0.08153EPSS
Exploits4References2
AlmaLinux
AlmaLinux
added 2020/11/03 12:33 p.m.45 views

Moderate: dovecot security update

Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and supports e-mail in either the maildir or mbox format. The SQL drivers and authentication plug-ins are provided as subpackages. Security Fixes: doveco...

5.3CVSS7AI score0.08153EPSS
Exploits4References2
NVD
NVD
added 2020/10/23 1:15 p.m.23 views

CVE-2020-27216

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub...

7CVSS0.04352EPSS
Exploits1References140
OSV
OSV
added 2020/10/23 1:15 p.m.4 views

UBUNTU-CVE-2020-27216

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub...

7CVSS7.2AI score0.04352EPSS
Exploits1References7
Cent OS
Cent OS
added 2020/10/20 6:7 p.m.721 views

glib2, ibus security update

CentOS Errata and Security Advisory CESA-2020:3978 An update for glib2 and ibus is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed...

9.8CVSS6.6AI score0.02602EPSS
Exploits0References7
Veracode
Veracode
added 2020/10/13 1:33 a.m.36 views

Information Disclosure

junit is vulnerable to Information Disclosure. The vulnerability exists through the behaviour of TemporaryFolder on UNIX-like systems, where the system's temporary directory is shared between all users on that system by default...

5.5CVSS5.5AI score0.01695EPSS
Exploits1References71Affected Software1
Cvelist
Cvelist
added 2020/10/12 5:55 p.m.34 views

CVE-2020-15250 Information disclosure in JUnit4

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

4.4CVSS5.6AI score0.01695EPSS
Exploits1References39
OpenVAS
OpenVAS
added 2020/09/26 12:0 a.m.21 views

Fedora: Security Advisory for dovecot (FEDORA-2020-b8ebc4201e)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.08153EPSS
Exploits7References2
RedHat Linux
RedHat Linux
added 2020/09/10 1:3 p.m.64 views

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.5CVSS6.8AI score0.06187EPSS
Exploits4References4
OpenVAS
OpenVAS
added 2020/09/04 12:0 a.m.23 views

Fedora: Security Advisory for dovecot (FEDORA-2020-cd8b8f887b)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

7.5CVSS7.7AI score0.08153EPSS
Exploits7References2
Tenable Nessus
Tenable Nessus
added 2020/07/14 12:0 a.m.27 views

RHEL 8 : dovecot (RHSA-2020:2901)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2020:2901 advisory. Dovecot is an IMAP server for Linux and other UNIX-like systems, written primarily with security in mind. It also contains a small POP3 server, and...

7.5CVSS7.5AI score0.07167EPSS
Exploits3References4
RedHat Linux
RedHat Linux
added 2020/07/13 8:32 p.m.60 views

Important: Red Hat Security Advisory: dovecot security update

An update for dovecot is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

7.5CVSS7.2AI score0.07167EPSS
Exploits3References2
CNVD
CNVD
added 2020/06/16 12:0 a.m.6 views

Mutt Information Disclosure Vulnerability

Mutt is a text-based mail client for Unix-like systems by Michael Elkins Software Developers. A security vulnerability exists in Mutt versions prior to 1.14.3. The vulnerability can be exploited by an attacker to conduct a man-in-the-middle attack using the PREAUTH response...

5.9CVSS6.5AI score0.0214EPSS
Exploits0References1
BDU FSTEC
BDU FSTEC
added 2020/05/13 12:0 a.m.6 views

The vulnerability of the input system for writing multiple languages in Unix-like operating systems, such as ibus, allows a intruder to gain unauthorized access to information and compromise its integrity.

The vulnerability of the input system for writing multiple languages in Unix-like operating systems, such as ibus, is related to the lack of authentication when the DBus server is configured incorrectly. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to...

7.1CVSS6.8AI score0.00365EPSS
Exploits0References8Affected Software6
AlmaLinux
AlmaLinux
added 2020/04/28 9:26 a.m.32 views

Moderate: ibus and glib2 security and bug fix update

GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in GNOME, the main loop implementation, and a large set of utility functions for strings and common data structures. The Intelligent Input Bus IBus is an input...

7.1CVSS1.2AI score0.00365EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2020/03/31 9:10 p.m.45 views

Moderate: Red Hat Security Advisory: dovecot security and bug fix update

An update for dovecot is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from th...

8.8CVSS6.8AI score0.02417EPSS
Exploits1References5
OpenVAS
OpenVAS
added 2020/02/21 12:0 a.m.43 views

Fedora: Security Advisory for dovecot (FEDORA-2020-0e6a67af5a)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS7.1AI score0.62579EPSS
Exploits1References2
Kitploit
Kitploit
added 2020/02/06 11:30 a.m.159 views

Misp-Dashboard - A Dashboard For A Real-Time Overview Of Threat Intelligence From MISP Instances

A dashboard showing live data and statistics from the ZMQ feeds of one or more MISP instances. The dashboard can be used as a real-time situational awareness tool to gather threat intelligence information. The misp-dashboard includes a gamification tool to show the contributions of each...

7.1AI score
Exploits0References1
Rows per page
Query Builder