Lucene search
+L

1410 matches found

RedhatCVE
RedhatCVE
added 2020/10/13 8:15 p.m.69 views

CVE-2020-15250

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

5.5CVSS1.5AI score0.01695EPSS
SaveExploits1References4
OSV
OSV
added 2020/10/12 6:15 p.m.46 views

CVE-2020-15250

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

5.5CVSS8.2AI score
SaveExploits0References39
NVD
NVD
added 2020/10/12 6:15 p.m.29 views

CVE-2020-15250

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

5.5CVSS0.01695EPSS
SaveExploits1References39
UbuntuCve
UbuntuCve
added 2020/10/12 6:15 p.m.41 views

CVE-2020-15250

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

5.5CVSS6.9AI score0.01695EPSS
SaveExploits1References15
Prion
Prion
added 2020/10/12 6:15 p.m.38 views

Information disclosure

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

1.9CVSS5.4AI score0.01695EPSS
SaveExploits1References39Affected Software4
Cvelist
Cvelist
added 2020/10/12 5:55 p.m.48 views

CVE-2020-15250 Information disclosure in JUnit4

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

4.4CVSS5.6AI score0.01695EPSS
SaveExploits1References39
AlpineLinux
AlpineLinux
added 2020/10/12 5:55 p.m.58 views

CVE-2020-15250

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

5.5CVSS5.3AI score0.01695EPSS
SaveExploits1
CVE
CVE
added 2020/10/12 5:55 p.m.510 views

CVE-2020-15250

CVE-2020-15250 affects JUnit4 TemporaryFolder information disclosure in Unix-like environments where the system tmp dir is shared among users. Affected: JUnit4 versions before 4.13.1; fixed in 4.13.1 for Java 7+; Java 6 and earlier have no patch. Workarounds include running tests with a dedicated...

5.5CVSS5.2AI score0.01695EPSS
SaveExploits1References39Affected Software1
Debian CVE
Debian CVE
added 2020/10/12 5:55 p.m.52 views

CVE-2020-15250

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

5.5CVSS6.5AI score0.01695EPSS
SaveExploits1
OSV
OSV
added 2020/10/12 5:33 p.m.171 views

GHSA-269G-PWP5-87PP TemporaryFolder on unix-like systems does not limit access to created files

Vulnerability The JUnit4 test rule TemporaryFolder contains a local information disclosure vulnerability. Example of vulnerable code: java public static class HasTempFolder @Rule public TemporaryFolder folder = new TemporaryFolder; @Test public void testUsingTempFolder throws IOException...

4.4CVSS6.8AI score0.01695EPSS
SaveExploits1References41
CNVD
CNVD
added 2020/09/28 12:00 a.m.11 views

cPanel Key Management Vulnerability

cPanel is a set of Web-based automated colocation platforms from the American company cPanel. The platform is primarily used to automate the management of websites and servers. A key management vulnerability exists in cPanel versions prior to 88.03, which stems from the creation of predictable...

7.5CVSS6.7AI score0.01385EPSS
SaveExploits0References1
OSV
OSV
added 2020/09/25 6:15 a.m.11 views

CVE-2020-26107

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

7.5CVSS7.1AI score0.01385EPSS
SaveExploits0References1
NVD
NVD
added 2020/09/25 6:15 a.m.27 views

CVE-2020-26107

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

7.5CVSS0.01385EPSS
SaveExploits0References1
Prion
Prion
added 2020/09/25 6:15 a.m.25 views

Code injection

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

5CVSS7.6AI score0.01385EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2020/09/25 5:42 a.m.76 views

CVE-2020-26107

Summary: CVE-2020-26107 affects cPanel prior to 88.0.3, where an upgrade establishes predictable PowerDNS API keys, per multiple connected sources. Affected software: cPanel versions before 88.0.3. Root cause / vulnerability detail: During upgrade, the process creates predictable API keys for Pow...

7.5CVSS7.5AI score0.01385EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/09/25 5:42 a.m.35 views

CVE-2020-26107

cPanel before 88.0.3, upon an upgrade, establishes predictable PowerDNS API keys SEC-561...

7.6AI score0.01385EPSS
SaveExploits0References1
Kitploit
Kitploit
added 2020/08/23 12:30 p.m.80 views

Intel Owl - Analyze Files, Domains, IPs In Multiple Ways From A Single API At Scale

Do you want to get threatintelligence data about a file, an IP or a domain? Do you want to get this kind of data from multiple sources at the same time using a single API request? You are in the right place! This application is built to scale out and to speed up the retrieval of threat info. It c...

7.3AI score
SaveExploits0References16
Oracle linux
Oracle linux
added 2020/07/07 12:00 a.m.54 views

firefox security update

68.6.1-1.0.1 - fix LDLIBRARYPATH - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one 68.6.1-1 - Update to 68.6.1 ESR Wed Mar 04 2020 Jan Horak - Update to 68.6.0 build1 68.5.0-3 - Added fix for rhbz1805667 - Enabled mzbz@1170092 - Firefox prefs at /etc Fri Feb 07 2020 J...

9.8CVSS9.5AI score0.07063EPSS
SaveExploits2
OSV
OSV
added 2020/07/01 4:15 p.m.12 views

CVE-2020-2500

This improper access control vulnerability in Helpdesk allows attackers to get control of QNAP Kayako service. Attackers can access the sensitive data on QNAP Kayako server with API keys. We have replaced the API key to mitigate the vulnerability, and already fixed the issue in Helpdesk 3.0.1 and...

6.5CVSS5.9AI score0.00745EPSS
SaveExploits0References1
CVE
CVE
added 2020/07/01 3:53 p.m.64 views

CVE-2020-2500

The CVE-2020-2500 entry concerns QNAP Helpdesk (Kayako service). The vulnerability is an improper access control flaw that allows an attacker to access sensitive data on the QNAP Kayako server by abusing API keys, potentially enabling control over the Helpdesk component. The underlying issue is a...

9.8CVSS6.4AI score0.00745EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder