290 matches found
UBUNTU-CVE-2018-11233
In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory...
Directory traversal
Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to serve static resources e.g. CSS, JS, images. When static resources are served from a file system on Windows as opposed to the classpath, or...
CVE-2018-0822
NTFS in Windows 10 Gold, 1511, 1607, 1703 and 1709, Windows Server 2016 and Windows Server, version 1709 allows an elevation of privilege vulnerability due to the way NTFS handles objects, aka "Windows NTFS Global Reparse Point Elevation of Privilege Vulnerability"...
winfsp - Windows File System Proxy
WinFsp is a set of software components for Windows computers that allows the creation of user mode file systems. In this sense it is similar to FUSE Filesystem in Userspace, which provides the same functionality on UNIX-like computers. Some of the benefits and features of using WinFsp are listed...
iCAM Workstation Control 4.8.0.0 - Authentication Bypass Vulnerability
Exploit for windows platform in category local exploits 1. From the login screen most keys are blocked accept alphanumeric keys. However if you press the Alt & Tab hotkey then you can access the desktop of the user currently running the iCAM client. 2. Although a blank desktop, you can then press...
MS13-036: Description of the security update for the Windows file system kernel-mode driver (ntfs.sys): April 9, 2013
None None...
Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2012:147)
Security issues were identified and fixed in mozilla thunderbird : Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we...
DEBIAN-CVE-2007-4199
Brian Carrier The Sleuth Kit TSK before 2.09 allows user-assisted remote attackers to cause a denial of service application crash and prevent examination of certain NTFS files via a malformed NTFS image that triggers 1 dereference of a certain integer value by ntfsdent.c in fls, or 2 dereference ...
PT-2002-2786 · Microsoft +1 · Ntfs +2
Name of the Vulnerable Software and Affected Versions: BestCrypt BCWipe versions 1.0.7 and 2.0 through 2.35.1 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS...
PT-2002-2787 · Microsoft +1 · Ntfs +2
Name of the Vulnerable Software and Affected Versions: East-Tec Eraser version 2002 Description: The issue allows attackers to recover sensitive information that was supposed to be deleted because it does not clear Windows alternate data streams attached to files on NTFS file systems...