CVE-2018-11413

BearAdmin 0.5 is affected by CVE-2018-11413. A remote attacker can trigger directory traversal via /admin/databack/download.html?name=, e.g., name=../application/database.php, to read configuration credentials (MySQL) from the server. Affected component: databack/download.html handling of the nam...

Important: Red Hat Security Advisory: rhev-hypervisor security, bug fix, and enhancement update

An updated rhev-hypervisor package that fixes two security issues, multiple bugs, and adds enhancements is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...