Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35661)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35661 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35662).

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35662 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35573)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35573 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35658)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35658 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35574)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35574 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35659)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID: CVE-2021-35659 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35656)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID:CVE-2021-35656 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

Security Bulletin: Vulnerabilities in Oracle Outside In Technology component affect Content Collector for Email (CVE-2021-35660)

Summary There are vulnerabilities in in Oracle Outside In Technology related to Outside In Filters used by Content Collector for Email. Vulnerability Details CVEID:CVE-2021-35660 DESCRIPTION: An unspecified vulnerability in Oracle Outside In Technology related to the Outside In Filters component...

DEBIAN-CVE-2021-43566

All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for...

AZL-37006 CVE-2021-43566 affecting package samba for versions less than 4.18.3-1

All versions of Samba prior to 4.13.16 are vulnerable to a malicious client using an SMB1 or NFS race to allow a directory to be created in an area of the server file system not exported under the share definition. Note that SMB1 has to be enabled, or the share also available via NFS in order for...

Samba 竞争条件问题漏洞

Samba is a standard Windows interoperability suite for Linux and Unix. A post-link vulnerability exists in Samba file server that results from a symbolic link contention condition when creating directories. A remote authenticated user can create a directory on a Unix file system outside of the...

gif2apng 缓冲区错误漏洞

gif2apng is a simple program that converts animations from GIF to APNG format. gif2apng suffers from a buffer overflow vulnerability that could be exploited by an attacker to write data outside the allocated buffer...

The vulnerability of the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to gain increased privileges.

The vulnerability in the kernel of operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS relates to operations that occur outside of the buffer in memory. Exploiting this vulnerability can allow an attacker to gain increased privileges...

CVE-2021-43051

The Spotfire Server component of TIBCO Software Inc.'s TIBCO Spotfire Server, TIBCO Spotfire Server, and TIBCO Spotfire Server contains a difficult to exploit vulnerability that allows malicious custom API clients with network access to execute internal API operations outside of the scope of thos...

jenkins: FilePath#listFiles lists files outside directories with agent read access when following symbolic links.

An incorrect permissions validation vulnerability was found in Jenkins. The FilePathlistFiles lists files outside directories with agent read access when following symbolic links. This may allow an attacker to get access to restricted data...

CVE-2021-26248

Philips MRI 1.5T and MRI 3T Version 5.x.x assigns an owner who is outside the intended control sphere to a resource...

Philips Mri 1.5T和Philips Mri 3T 安全漏洞

Philips Mri 1.5T and Philips Mri 3T are both products of the Dutch company Philips.Philips Mri 1.5T is a magnetic resonance system. The Philips Mri 1.5T is a magnetic resonance system designed to help clinicians diagnose with confidence, explore new applications, and work efficiently.The Philips...

gnome-autoar: Directory traversal via directory symbolic links pointing outside of the destination directory

autoar-extractor.c in GNOME gnome-autoar through 0.2.4, as used by GNOME Shell, Nautilus, and other software, allows Directory Traversal during extraction because it lacks a check of whether a file's parent is a symlink to a directory outside of the intended extraction location...

CVE-2021-34597

Improper Input Validation vulnerability in PC Worx Automation Suite of Phoenix Contact up to version 1.88 could allow an attacker with a manipulated project file to unpack arbitrary files outside of the selected project directory...

Mycodo 路径遍历漏洞

Mycodo is an environment monitoring and conditioning system. Used to couple inputs and outputs to sense and manipulate the environment, Mycodo is vulnerable to a path traversal vulnerability in versions prior to 8.12.7, which stems from a networked system or product failing to properly filter...