186 matches found
PT-2021-25912
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.9.276 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-25848
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.19.198 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-25942
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v4.4.276 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
PT-2021-25793
Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.4.134 Description The issue is related to extremely large seq buffer allocations in the seq file function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...
ruby: NUL injection vulnerability of File.fnmatch and File.fnmatch?
A flaw was discovered in Ruby in the way certain functions handled strings containing NULL bytes. Specifically, the built-in methods File.fnmatch and its alias File.fnmatch? did not properly handle path patterns containing the NULL byte. A remote attacker could exploit this flaw to make a Ruby...
CVE-2021-32551
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-15 package apport hooks, it could expose private data to other local users...
CVE-2021-32555
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users...
UBUNTU-CVE-2021-32553
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the openjdk-17 package apport hooks, it could expose private data to other local users...
UBUNTU-CVE-2021-32555
It was discovered that readfile in apport/hookutils.py would follow symbolic links or open FIFOs. When this function is used by the xorg-hwe-18.04 package apport hooks, it could expose private data to other local users...
PT-2021-10553 · Metinfo · Metinfo
Name of the Vulnerable Software and Affected Versions: MetInfo version 7.0 beta Description: The issue allows attackers to delete and modify ini files in specific locations, including app/system/language/admin/language general.class.php and app/system/include/function/file.func.php...
MetInfo 路径遍历漏洞
MetInfo adopts PHP+Mysql architecture, it is a cms building system which is very friendly to SEO, fully functional, supports multi-language, responsive display, and extremely suitable for enterprise and company website construction. A file modification vulnerability exists in MetInfo 7.0 beta. An...
PT-2021-3121
Name of the Vulnerable Software and Affected Versions djvulibre versions 3.5.28 and earlier Description A flaw was found in the function DJVU::DjVuDocument::get djvu file that can cause a stack overflow via a crafted djvu file, potentially leading to an application crash and other consequences. T...
WordPress 安全漏洞
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the Theme...
CVE-2021-25864
node-red-contrib-huemagic 3.0.0 is affected by hue/assets/..%2F Directory Traversal.in the res.sendFile API, used in file hue-magic.js, to fetch an arbitrary file...
PT-2020-16462
Name of the Vulnerable Software and Affected Versions OpenSC versions prior to 0.21.0-rc1 Description The issue is related to a heap-based buffer overflow in the Oberthur smart card software driver, specifically in the sc oberthur read file function. Recommendations For versions prior to...
GHSA-34GH-3CWV-WVP2 Directory traversal in rollup-plugin-server
This affects all versions of package rollup-plugin-server. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function...
CVE-2019-10791
promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization...
CVE-2019-10791
promise-probe before 0.10.0 allows remote attackers to perform a command injection attack. The file, outputFile and options functions can be controlled by users without any sanitization...