CVE-2023-30571

Libarchive through 3.6.2 can cause directories to have world-writable permissions. The umask call inside archivewritediskposix.c changes the umask of the whole process for a very short period of time; a race condition with another thread can lead to a permanent umask 0 setting. Such a race...

PT-2023-4600 · Unknown +3 · Libarchive +3

Name of the Vulnerable Software and Affected Versions: Libarchive versions 3.6.2 and earlier Description: The issue is caused by a race condition with the umask call inside archive write disk posix.c, which can lead to a permanent umask 0 setting. This can result in implicit directory creation wi...

Drive Explorer Disk Driver macOS Code Execution

The vulnerability of the Drive Explorer disk driver for macOS is related to improper code generation. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

SIMPLE DESIGN Daily Journal Security Vulnerabilities

SIMPLE DESIGN Daily Journal is a diary application from SIMPLE DESIGN. A security vulnerability exists in SIMPLE DESIGN Daily Journal version 1.012.GP.B. The vulnerability stems from a problem with an unknown feature of the SQLite database that can lead to cause plaintext to be stored in a file o...

CVE-2023-25953

Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LIN...

CVE-2023-25953

Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LIN...

CVE-2023-25953: Improper Control of Generation of Code

Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LIN...

CVE-2023-25953

Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LIN...

Citrix Hypervisor Installation Fails: "This host does not appear to have any hard disks"

During CH8.2CU1 installation onSuperServer 210GP-DNR with local NVMe RAID1 configurated, local disks can not be found when selecting disk for vm data:...

CVE-2023-1255 - Possible denial of service on Arm 64 (aarch64) using AES XTS mode

The AES-XTS cipher decryption implementation for 64 bit ARM platform contains a bug that could cause it to read past the input buffer, leading to a crash. Impact summary: Applications that use the AES-XTS algorithm on the 64 bit ARM platform can crash in rare circumstances. The AES-XTS algorithm ...

CVE-2023-31904

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion...

CVE-2023-31904

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion...

Design/Logic Flaw

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion...

PT-2023-23509 · Unknown · Savysoda Wifi Hd Wireless Disk Drive

Name of the Vulnerable Software and Affected Versions: savysoda Wifi HD Wireless Disk Drive version 11 Description: The issue concerns a Local File Inclusion problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...

CVE-2023-31904

The CVE-2023-31904 entry documents a Local File Inclusion vulnerability in savysoda Wifi HD Wireless Disk Drive 11. The issue is described as LFI affecting the device, with CVSSv3.1 base score 7.5 (HIGH), attack vector NETWORK, complexity LOW, and no privileges required. The provided references n...

Savy Soda Wifi HD Wireless Disk Drive – Path traversal vulnerability

Savy Soda Wifi HD Wireless Disk Drive is Savy Soda's application capable of turning your iPhone or iPad into mobile network storage. A security vulnerability exists in Savy Soda Wifi HD Wireless Disk Drive version 11, which stems from vulnerability to local file inclusion attacks...

CVE-2023-31904: Improper Limitation of a Pathname to a Restricted Directory

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion...

CVE-2023-31904

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion...

CVE-2023-31904

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion...

kernel: md/raid0, raid10: Don't set discard sectors for request queue

In the Linux kernel, the following vulnerability has been resolved: md/raid0, raid10: Don't set discard sectors for request queue It should use diskstacklimits to get a proper maxdiscardsectors rather than setting a value by stack drivers. And there is a bug. If all member disks are rotational...