CVE-2021-22720

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when restoring a project...

CVE-2021-22719

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when a file is uploaded...

CVE-2021-22719

The CVE-2021-22719 entry describes a path traversal flaw in Schneider Electric C-Bus Toolkit (v1.15.7 and earlier). The vulnerability arises when a file is uploaded, enabling remote code execution. Red Hat, NVD, and CISA/Nessus/ZDI references corroborate the issue as a CWE-22 path traversal that ...

CVE-2021-22718

Schneider Electric C-Bus Toolkit is affected by CVE-2021-22718 (Path Traversal). The Red Hat, NVD, and CVE ecosystem describe a CWE-22 path traversal flaw in C-Bus Toolkit versions 1.15.7 and earlier that could allow remote code execution when restoring project files. The ZDI advisory confirms co...

CVE-2021-22718

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in C-Bus Toolkit V1.15.7 and prior that could allow a remote code execution when restoring project files...

CVE-2021-22716

The CVE-2021-22716 entry concerns Schneider Electric C-Bus Toolkit (versions up to v1.15.9) with an Improper Permission Assignment for Critical Resource vulnerability that could allow remote code execution when an unprivileged user modifies a file. The root cause is incorrect permissions on criti...

CVE-2021-22716

A CWE-732: Incorrect Permission Assignment for Critical Resource vulnerability exists that could allow remote code execution when an unprivileged user modifies a file. Affected Product: C-Bus Toolkit V1.15.9 and prior...

施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is a software application from Schneider Electric, France. It is used to assist in C-Bus installations. A path traversal vulnerability exists in C-Bus Toolkit V1.15.7 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is a software application from Schneider Electric, France. It is used to assist in C-Bus installations. A path traversal vulnerability exists in versions of C-Bus Toolkit prior to V1.15.7, which can be exploited by an attacker to execute arbitrary code...

施耐德电气 C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug a C-Bus installation on a personal computer. A path traversal vulnerability exists in C-Bus Toolkit V1.15.7 and earlier versions, which can be exploited by an attacker to...

施耐德 Schneider Electric C-Bus Toolkit 路径遍历漏洞

Schneider Electric C-Bus Toolkit is a software application from Schneider Electric, France. It is used to assist in C-Bus installations. A path traversal vulnerability exists in C-Bus Toolkit V1.15.7 and earlier versions, which can be exploited by an attacker to execute arbitrary code...

Schneider Electric C-Bus Toolkit 权限许可和访问控制问题漏洞

Schneider Electric C-Bus Toolkit is an application from Schneider Electric, France. It is used to run, configure and debug a C-Bus installation on a personal computer. A privilege permission and access control issue vulnerability exists in C-Bus Toolkit V1.15.7 and prior versions, which arises fr...

systemd bug fix and enhancement update

The systemd packages contain systemd, a system and service manager for Linux, compatible with the SysV and LSB init scripts. It provides aggressive parallelism capabilities, uses socket and D-Bus activation for starting services, offers on-demand starting of daemons, and keeps track of processes...

OESA-2021-1095 grub2 security update

GNU GRUB is a Multiboot boot loader. It was derived from GRUB, the GRand Unified Bootloader, which was originally designed and implemented by Erich Stefan Boleyn. Briefly, a boot loader is the first software program that runs when a computer starts. It is responsible for loading and transferring...

March 25, 2021-KB5000854 (OS Build 17763.1852) Preview

None None...

[SECURITY] Fedora 34 Update: at-spi2-core-2.39.91-1.fc34

at-spi allows assistive technologies to access GTK-based applications. Essentially it exposes the internals of applications for automation, so tools such as screen readers, magnifiers, or even scripting interfaces can query and interact with GUI controls. This version of at-spi is a major break...

Fedora: Security Advisory for at-spi2-core (FEDORA-2021-303f6623fa)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

kernel: malicious USB devices can lead to multiple out-of-bounds write

An out-of-bounds write flaw was found in the Linux kernel’s HID drivers. An attacker, able to plug in a malicious USB device, can crash the system or read and write to memory with an incorrect address...

Security Bulletin: Multiple vulnerabilities in IBM Java Runtime affect IBM Integration Bus and IBM App Connect Enterpise v11.

Summary There are multiple vulnerabilities in IBM® SDK Java™ Technology Edition, which are used by IBM Integration Bus & IBM App Connect Enterprise v11. These issues were disclosed as part of the IBM Java SDK updates in October 2020 Vulnerability Details CVEID: CVE-2020-14779 DESCRIPTION: An...

Updated glib2.0 packages fix security vulnerabilities

Fix various instances within GLib where gmemdup was vulnerable to a silent integer truncation and heap overflow problem discovered by Kevin Backhouse, work by Philip Withnall 2319 Fix some issues with handling over-long invalid input when parsing for GDate !1824 Don't load GIO modules or parse...