10539 matches found
Huawei EulerOS: Security Advisory for cpio (EulerOS-SA-2020-1522)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
The vulnerability of the EPUB validator FlightCrew, related to insufficient validation of input data, allows a perpetrator to write arbitrary files.
The vulnerability of the EPUB validator FlightCrew is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to write arbitrary files into any directory within a Zip archive...
Moderate: Red Hat Security Advisory: sqlite security and bug fix update
An update for sqlite is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...
sqlite: zipfileUpdate in ext/misc/zipfile.c mishandles a NULL pathname during an update of a ZIP archive
zipfileUpdate in ext/misc/zipfile.c in SQLite 3.30.1 mishandles a NULL pathname during an update of a ZIP archive...
RHEL 8 : sqlite (RHSA-2020:1810)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1810 advisory. SQLite is a C library that implements an SQL database engine. A large subset of SQL92 is supported. A complete database is stored in a singl...
The vulnerability of the archive_acl_from_text_lins function in the libarchive library, which allows a hacker to trigger a service failure.
The vulnerability of the archiveaclfromtextlins function in the libarchive library is related to the dereferencing of a NULL pointer. Exploiting this vulnerability could allow an attacker, operating remotely, to cause service failures through a specially created archive...
The vulnerability of the libarchive library, related to reading beyond the buffer boundaries of memory, allows a hacker to cause a service failure.
The vulnerability of the libarchive library is related to reading beyond the buffer boundaries of memory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service interruptions through a specially created archive...
CVE-2020-12137
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing,...
Code injection
GNU Mailman 2.x before 2.1.30 uses the .obj extension for scrubbed application/octet-stream MIME parts. This behavior may contribute to XSS attacks against list-archive visitors, because an HTTP reply from an archive web server may lack a MIME type, and a web browser may perform MIME sniffing,...
CVE-2020-11806
In MailStore Outlook Add-in and Email Archive Outlook Add-in through 12.1.2, the login process does not validate the validity of the certificate presented by the server...
Code injection
In MailStore Outlook Add-in and Email Archive Outlook Add-in through 12.1.2, the login process does not validate the validity of the certificate presented by the server...
CVE-2020-11806
The CVE-2020-11806 entry concerns MailStore Outlook Add-in and Email Archive Outlook Add-in up to version 12.1.2, where the login process does not validate the server’s SSL/TLS certificate. This represents a root-cause weakness in certificate validation during authentication, potentially allowing...
CVE-2020-7055
An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive...
CVE-2020-7055
An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive...
CVE-2020-7055
An issue was discovered in Elementor 2.7.4. Arbitrary file upload is possible in the Elementor Import Templates function, allowing an attacker to execute code via a crafted ZIP archive...
ansible: Extract-Zip function in win_unzip module does not check extracted path
A flaw was found in the Ansible Engine when using the Extract-Zip function from the winunzip module as the extracted files are not checked if they belong to the destination folder. An attacker could take advantage of this flaw by crafting an archive anywhere in the file system, using a path...
Ansible: archive traversal vulnerability in ansible-galaxy collection install
An archive traversal flaw was found in Ansible Engine when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system...
Ansible: archive traversal vulnerability in ansible-galaxy collection install
An archive traversal flaw was found in Ansible Engine when running ansible-galaxy collection install. When extracting a collection .tar.gz file, the directory is created without sanitizing the filename. An attacker could take advantage to overwrite any file within the system...
RHEL 7 / 8 : Ansible security update (2.9.7) (Important) (RHSA-2020:1542)
The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:1542 advisory. Ansible is a simple model-driven configuration management, multi-node deployment, and remote-task execution system. Ansible works over S...
