CVE-2016-20015

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown...

Race condition

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown...

UBUNTU-CVE-2016-20015

In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript allows the smokeping user to gain ownership of any file, allowing for the smokeping user to gain root privileges. There is a race condition involving /var/lib/smokeping and chown...

CVE-2022-35196

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...

PT-2022-25165

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description A heap-use-after-free issue was discovered in the function grow unicode at /lib/ttf.c. Recommendations At the moment, there is no information about a newer version that contains a fix for th...

CVE-2022-40009: Use After Free

SWFTools commit 772e55a was discovered to contain a heap-use-after-free via the function growunicode at /lib/ttf.c...

CVE-2022-40008: Out-of-bounds Write

SWFTools commit 772e55a was discovered to contain a heap-buffer overflow via the function readU8 at /lib/ttf.c...

CVE-2022-35196: Cross-Site Request Forgery (CSRF)

TestLink v1.9.20 was discovered to contain a Cross-Site Request Forgery CSRF via /lib/plan/planView.php...

PT-2022-25164

Name of the Vulnerable Software and Affected Versions SWFTools affected versions not specified Description A heap-buffer overflow issue was discovered in the function readU8 at /lib/ttf.c. Recommendations At the moment, there is no information about a newer version that contains a fix for this...

CVE-2022-35193

TestLink v1.9.20 was discovered to contain a SQL injection vulnerability via /lib/execute/execNavigator.php...

CVE-2022-35195

TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php...

CVE-2022-35195: Undefined Security Weakness

TestLink 1.9.20 Raijin was discovered to contain a broken access control vulnerability at /lib/attachments/attachmentdownload.php...

PT-2022-22626

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Raijin Description A broken access control issue was found in TestLink at the "/lib/attachments/attachmentdownload.php" API endpoint. Recommendations For TestLink version 1.9.20 Raijin, consider restricting access to th...

PT-2022-22624

Name of the Vulnerable Software and Affected Versions TestLink version 1.9.20 Description The issue is a SQL injection vulnerability. It can be exploited via the /lib/execute/execNavigator.php endpoint. Recommendations For TestLink version 1.9.20, consider restricting access to the...

CVE-2022-38301

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...

CVE-2022-38301

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...

CVE-2022-38301

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...

Theonedev Onedev 路径遍历漏洞

Theonedev Onedev is a JAVA-based all-in-one DevOps platform from the Theonedev team. The platform supports container build, orchestration, CI, Git management, team collaboration and other features to help developers build a simple, powerful development platform. Theonedev A path traversal...

CVE-2022-38301: Improper Limitation of a Pathname to a Restricted Directory

Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib...

PT-2022-24351 · Onedev · Onedev

Name of the Vulnerable Software and Affected Versions: Onedev version 7.4.14 Description: The issue allows attackers to access restricted files and directories by uploading a crafted JAR file into the "/opt/onedev/lib" directory, which is a path traversal vulnerability. Recommendations: For Onede...