External Control Of Filename

phenx/php-svg-lib is vulnerable to External Control of Filename. The vulnerability is due to insecure handling of inline CSS font definitions, allowing an attacker to deserialize a PHAR file through the phar:// URL handler. Note that remote code execution is only possible on PHP versions less the...

PT-2020-15226

Name of the Vulnerable Software and Affected Versions PAN-OS versions 7.1 through 8.0 PAN-OS 8.1 versions prior to 8.1.14 PAN-OS 9.0 versions prior to 9.0.7 PAN-OS 9.1 versions prior to 9.1.1 Description An external control of filename vulnerability in the command processing of PAN-OS allows an...