Red Database parseFileName File Access

The vulnerability of the parseFileName function in the SysFunction.cpp module of the “Red Database” database management system is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor to gain access to arbitrary files...

UBUNTU-CVE-2019-9021

An issue was discovered in PHP before 5.6.40, 7.x before 7.1.26, 7.2.x before 7.2.14, and 7.3.x before 7.3.1. A heap-based buffer over-read in PHAR reading functions in the PHAR extension may allow an attacker to read allocated or unallocated memory past the actual data when trying to parse the...