Lucene search
+L

996 matches found

OSV
OSV
added 2020/05/14 4:15 p.m.9 views

CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

6.3CVSS6.8AI score
Exploits0References52
UbuntuCve
UbuntuCve
added 2020/05/14 4:15 p.m.42 views

CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

6.3CVSS6.8AI score0.01808EPSS
Exploits0References4
Prion
Prion
added 2020/05/14 4:15 p.m.45 views

Design/Logic Flaw

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

3.3CVSS6.2AI score0.01808EPSS
Exploits0References52Affected Software50
OSV
OSV
added 2020/05/14 4:15 p.m.11 views

UBUNTU-CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

6.3CVSS6.7AI score0.01808EPSS
Exploits0References5
Cvelist
Cvelist
added 2020/05/14 3:57 p.m.34 views

CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

7AI score0.01808EPSS
Exploits0References52
CVE
CVE
added 2020/05/14 3:57 p.m.455 views

CVE-2020-1945

This CVE (CVE-2020-1945) affects Apache Ant. Connected Arch Linux advisory ASA-202005-15 confirms the vulnerability exists in ant before version 1.10.8-1, where Ant uses java.io.tmpdir for several tasks and can leak sensitive information. The fixcrlf and replaceregexp tasks may copy files from th...

6.3CVSS6.8AI score0.01808EPSS
Exploits0References52Affected Software1
Debian CVE
Debian CVE
added 2020/05/14 3:57 p.m.32 views

CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

6.3CVSS7AI score0.01808EPSS
Exploits0
AlpineLinux
AlpineLinux
added 2020/05/14 3:57 p.m.56 views

CVE-2020-1945

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

6.3CVSS7.2AI score0.01808EPSS
Exploits0
FreeBSD
FreeBSD
added 2020/05/14 12:0 a.m.34 views

Apache Ant leaks sensitive information via the java.io.tmpdir

Apache reports: Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back...

6.3CVSS2.2AI score0.01808EPSS
Exploits0References1
Malwarebytes
Malwarebytes
added 2020/05/06 3:15 p.m.83 views

Credit card skimmer masquerades as favicon

Malware authors are notorious for their deceptive attempts at staying one step ahead of defenders. As their schemes get exposed, they always need to go back to their bag of tricks to pull out a new one. When it comes to online credit card skimmers, we have already seen a number of evasion...

6.6AI score
Exploits0
Photon
Photon
added 2020/04/30 12:0 a.m.29 views

Important Photon OS Security Update - PHSA-2020-0291

Updates of 'git', 'NetworkManager' packages of Photon OS have been released...

7.5CVSS6.9AI score0.02135EPSS
Exploits0
CNVD
CNVD
added 2020/03/03 12:0 a.m.1 views

Command Execution Vulnerability in Ant Notes Desktop Client

Ant Notes Desktop Client is a personal favorite open source note taking software. Ant Notes Desktop Client has a command execution vulnerability that can be exploited by an attacker to gain server privileges...

7.5AI score
Exploits0
CNVD
CNVD
added 2020/02/21 12:0 a.m.2 views

Stored Cross-Site Scripting Vulnerability in Ant Express Display-based System

Ant Express Station is the sincere work of MaiMaiRui Network Technology Co., Ltd. based on the latest international SaaS Software as a Service model, the company's products are based on the concept of professional Saas services, is committed to providing customers with a professional one-stop...

6.2AI score
Exploits0
CNVD
CNVD
added 2020/01/01 12:0 a.m.2 views

Ant Browser suffers from dll hijacking vulnerability

Ant Browser is a lightweight browser software developed by Beijing Ant Browser Company. Ant Browser suffers from a dll hijacking vulnerability that can be exploited by attackers to execute arbitrary code...

7.5AI score
Exploits0
IBM Security Bulletins
IBM Security Bulletins
added 2019/11/01 9:23 p.m.42 views

Security Bulletin: A vulnerability in Apache Ant affects IBM InfoSphere Information Server

Summary A vulnerability in Apache Ant was addressed by IBM InfoSphere Information Server. Vulnerability Details CVEID: CVE-2012-2098 DESCRIPTION: Apache Commons Compress and Apache Ant are vulnerable to a denial of service, caused by an error when using bzip2 compression to compress files. By...

5CVSS0.9AI score0.12608EPSS
Exploits1Affected Software1
NVD
NVD
added 2019/10/23 6:15 p.m.21 views

CVE-2019-18350

In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...

6.1CVSS6.2AI score0.01138EPSS
Exploits1References1
OSV
OSV
added 2019/10/23 6:15 p.m.18 views

CVE-2019-18350

In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...

6.1CVSS6.4AI score
Exploits0References1
Prion
Prion
added 2019/10/23 6:15 p.m.17 views

Authorization

In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...

4.3CVSS6AI score0.01138EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/10/23 5:24 p.m.28 views

CVE-2019-18350

In Ant Design Pro 4.0.0, reflected XSS in the user/login redirect GET parameter affects the authorization component, leading to execution of JavaScript code in the login after-action script...

6.2AI score0.01138EPSS
Exploits1References1
CVE
CVE
added 2019/10/23 5:24 p.m.85 views

CVE-2019-18350

In Ant Design Pro 4.0.0, a reflected XSS in the user/login redirect GET parameter affects the authorization component, allowing execution of JavaScript in the login after-action script. Red Hat and other linked sources confirm the same issue exists across vendors; the vulnerability is tied to the...

6.1CVSS6.1AI score0.01138EPSS
Exploits1References1Affected Software1
Rows per page
Query Builder