23 matches found
CVE-2026-54585 mport sample file handling can write outside the configured root
mport is the MidnightBSD Package Manager. Prior to 2.7.8, createsamplefile in libmport/bundlereadinstallpkg.c did not constrain absolute source and destination paths from the sample-file manifest directive to mport-root. A malicious or malformed package manifest could therefore direct privileged...
EUVD-2026-76150
Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running projen, via crafted entries in the...
CVE-2026-89065 Relative path traversal in the generated file manifest cleanup component in projen
Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running projen, via crafted entries in the...
CVE-2026-89065
projen before 0.101.37 is affected by a relative path traversal in its generated file manifest cleanup component . Crafted entries in the version-controlled file manifest, consumed during project synthesis, can cause recursive deletion of files and directories outside the project directory that a...
CVE-2026-89065 Relative path traversal in the generated file manifest cleanup component in projen
Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running projen, via crafted entries in the...
CVE-2026-89065 Relative path traversal in the generated file manifest cleanup component in projen
Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running projen, via crafted entries in the...
CVE-2026-89065: Relative Path Traversal
Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running projen, via crafted entries in the...
PT-2026-89908
Relative path traversal in the generated file manifest cleanup component in projen before 0.101.37 might allow context-dependent attackers to recursively delete files and directories outside the project directory that are writable by the environment running projen, via crafted entries in the...
EUVD-2006-5570
Malware in sbrugna...
app.io (>=0.0.1, <=0.0.4), barbakoa (>=0.0.1, <=0.0.17) +21 more potentially affected by CVE-2021-25928 via safe-obj (1.0.2)
safe-obj NPM version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on safe-obj and may be impacted: - app.io =0.0.1, =0.0.1, =0.4.0, =0.0.5, =0.0.1, =1.0.0, =1.0.0, =0.2.1, =1.0.0, =0.6.5, =0.3.0, =1.0.1, =1.0.0, =1.0.0, =1.2.2 and more Source cve...
MS08-017: Description of the security update for BizTalk Server Office Web Components: March 11, 2008
A security vulnerability exists in the Microsoft BizTalk Server Office Web Components that could allow arbitrary code to run when a maliciously modified file is opened. This update resolves that vulnerability.INTRODUCTIONMicrosoft has released security bulletin MS08-017. The security bulletin...
MS07-042: Description of the security update for Microsoft XML Core Services 6.0: August 14, 2007
None None...
CVE-2006-5585
The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."...
CVE-2006-5585
The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."...
CVE-2006-5585
CVE-2006-5585 is a local privilege-elevation vulnerability in the Client-Server Run-time Subsystem (CSRSS) of Microsoft Windows XP SP2 and Windows Server 2003. The issue arises from improper processing/validation of embedded file manifests by CSRSS, which could let a logged-on attacker run a craf...
CVE-2006-5585: Undefined Security Weakness
The Client-Server Run-time Subsystem in Microsoft Windows XP SP2 and Server 2003 allows local users to gain privileges via a crafted file manifest within an application, aka "File Manifest Corruption Vulnerability."...
Microsoft Windows Manifest File Privilege Escalation Vulnerability
Description Microsoft Windows is prone to a local privilege-escalation vulnerability because the software fails to properly process and manage file manifests. An attacker may exploit this issue to manipulate file manifests to elevate user privileges. Successful exploits will result in the complet...
MS07-047: Vulnerability in Windows Media Player could allow remote code execution
None None...