Lucene search
K

6 matches found

Github Security Blog
Github Security Blog
added 2025/10/07 10:36 p.m.6 views

Deno's --deny-write check does not prevent permission bypass

Summary Deno.FsFile.prototype.utime and Deno.FsFile.prototype.utimeSync are not limited by the permission model check --deny-write=./. It's possible to change to change the access atime and modification mtime times on the file stream resource even when the file is opened with read only permission...

3.3CVSS6.8AI score0.00018EPSS
Exploits1References7Affected Software1
OSV
OSV
added 2023/09/14 9:30 a.m.22 views

GHSA-CGWF-W82Q-5JRR Apache Commons Compress denial of service vulnerability

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

5.5CVSS6.7AI score0.00014EPSS
Exploits0References5
Cvelist
Cvelist
added 2023/09/14 7:45 a.m.23 views

CVE-2023-42503 Apache Commons Compress: Denial of service via CPU consumption for malformed TAR file

Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...

6.7AI score0.00014EPSS
Exploits0References2
NVD
NVD
added 2010/02/25 7:30 p.m.16 views

CVE-2010-0424

The editcmd function in crontab.c in 1 cronie before 1.4.4 and 2 Vixie cron vixie-cron allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory...

3.3CVSS6.3AI score0.001EPSS
Exploits0References7
Cvelist
Cvelist
added 2010/02/25 7:0 p.m.21 views

CVE-2010-0424

The editcmd function in crontab.c in 1 cronie before 1.4.4 and 2 Vixie cron vixie-cron allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory...

6.1AI score0.001EPSS
Exploits0References7
Debian CVE
Debian CVE
added 2010/02/25 7:0 p.m.31 views

CVE-2010-0424

The editcmd function in crontab.c in 1 cronie before 1.4.4 and 2 Vixie cron vixie-cron allows local users to change the modification times of arbitrary files, and consequently cause a denial of service, via a symlink attack on a temporary file in the /tmp directory...

3.3CVSS6.2AI score0.001EPSS
Exploits0
Rows per page
Query Builder