14 matches found
CVE-2025-63888
The read function in file thinkphp\library\think\template\driver\File.php in ThinkPHP 5.0.24 contains a remote code execution vulnerability...
The vulnerability of the ceph_direct_read_write() function in the file.c component of the Linux kernel allows a hacker to cause a service failure.
The vulnerability of the cephdirectreadwrite function in the file.c component of the Linux kernel’s driver is related to improper memory release before deleting the last reference. Exploiting this vulnerability could allow an attacker to cause a service failure...
CVE-2025-32706 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
CVE-2025-24059 Windows Common Log File System Driver Elevation of Privilege Vulnerability
...
PT-2024-9429 · Microsoft · Windows Common Log File System Driver +1
Name of the Vulnerable Software and Affected Versions: Windows Common Log File System Driver affected versions not specified Description: The issue is related to a buffer overflow in memory, which can be exploited to elevate privileges. This can allow an attacker to affect the system. The estimat...
Microsoft Windows Common Log File System Driver Security Vulnerability
The Microsoft Windows Common Log File System Driver is Microsoft's Common Log File System CLFS API that provides a high-performance, general-purpose log file subsystem that can be used by specialized client applications and shared by multiple clients to optimize logging and access. access. A...
SUSE CVE-2014-10401
An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute...
OESA-2022-1641 perl-DBI security update
The DBI is the standard database interface module for Perl.It defines a set of methods, variables and conventions that providea consistent database interface independent of the actual database being used.It is important to remember that the DBI is just an interface.The DBI is a layer of "glue"...
DEBIAN-CVE-2014-10402
An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...
AZL-41925 CVE-2014-10402 affecting package perl-DBI for versions less than 1.632-1
An issue was discovered in the DBI module through 1.643 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute in the data source name DSN. NOTE: this issue exists because of an incomplete fix for CVE-2014-10401...
DEBIAN-CVE-2014-10401
An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute...
PT-2020-7600 · Dbi +3 · Dbi +3
Name of the Vulnerable Software and Affected Versions: DBI module versions prior to 1.632 Description: An issue was discovered in the DBI module for Perl, where DBD::File drivers can open files from folders other than those specifically passed via the f dir attribute. Recommendations: For version...
CGI::Session File Driver CGISESSID Cookie Traversal Authentication Bypass
The remote host appears to be using the CGI::Session PERL module to manage file-based sessions. The version of this module hosted by the remote web server fails to properly sanitize input to the session cookie of directory traversal sequences. An unauthenticated, remote attacker can leverage this...
CGI::Session CGISESSID Cookie值目录遍历漏洞
BUGTRAQ ID: 30267 CGI::Session是一个Perl5库,可提供可靠易用的模块化会话管理系统。 CGI::Session没有充分的过滤CGISESSID cookie值便将其用在了File驱动中创建会话数据文件的文件名。如果远程攻击者在cookie值中注入了目录遍历序列,就会导致File驱动从配置的会话数据目录以外的任意文件读取会话数据。 仅在满足了所有以下条件的情况下才可以利用这个漏洞: 1 Web应用使用了CGI::Session中的File驱动管理会话。 2 Web应用部署于基于Windows的系统。 3...