EUVD-2008-5327

Malware in sbrugna...

CVE-2022-22753

A Time-of-Check Time-of-Use bug existed in the Maintenance Updater Service that could be abused to grant Users write access to an arbitrary directory. This could have been used to escalate to SYSTEM access.This bug only affects Firefox on Windows. Other operating systems are unaffected.. This...

CVE-2022-42446

Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users...

CVE-2022-42446 HCL Sametime 12.0 and 12.0FP1 anonymous users have directory lookup access

Starting with Sametime 12, anonymous users are enabled by default. After logging in as an anonymous user, one has the ability to browse the User Directory and potentially create chats with internal users...

Security Bulletin: File Management Vulerability in IBM Watson Studio Local

Summary A security vulnerability involving symbolic links allowed arbitrary access to Watson Studio Local user directory. This vulnerability is addressed Vulnerability Details Third Party Entry: PSIRT-ADV0011814 DESCRIPTION: CVSS Base score: 8.8 CVSS Vector:...

IBM WebSphere Portal Unauthorized User Directory Access

The version of WebSphere Portal on the remote host may be affected by an unauthorized user directory access vulnerability. An attacker could manipulate URLs and gain access to sensitive files. Note that Nessus was unable to determine if the workaround in IBM's advisory has been applied. Determini...

CVE-2008-6584

html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the urlupload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory...

CVE-2008-6584

html/index.php in TorrentFlux 2.3 allows remote authenticated users to execute arbitrary code via a URL with a file containing an executable extension in the urlupload parameter, which is downloaded by TorrentFlux and can be accessed via a direct request in a html/downloads/ user directory...