1132 matches found
USN-4561-2 ruby-rack vulnerabilities
USN-4561-1 fixed vulnerabilities in Rack. This update provides the corresponding update for Ubuntu 16.04 LTS, Ubuntu 20.04 LTS and Ubuntu 20.10. Original advisory details: It was discovered that Rack incorrectly handled certain paths. An attacker could possibly use this issue to obtain sensitive...
CVE-2021-1800
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode...
CVE-2021-1800
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode...
CVE-2021-1800
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode...
CVE-2021-1800
CVE-2021-1800 is tied to Apple Xcode 12.4. The vulnerability is a path handling issue in on-demand resources that could allow a malicious app to access arbitrary host files when using Xcode. Apple fixed this by improving path validation in Xcode 12.4. The cited sources (Apple advisory HT212153 an...
CVE-2021-1800
A path handling issue was addressed with improved validation. This issue is fixed in Xcode 12.4. A malicious application may be able to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode...
USN-4820-1 s-nail vulnerability
It was discovered that S-nail incorrectly handled paths. An attacker could possible use this issue to write arbitrary files and escalate privileges...
USN-4819-1 leptonlib vulnerabilities
It was discovered that Leptonica incorrectly handled path names. An attacker could possibly use this issue to obtain sensitive information. This issue only affected Ubuntu 16.04 ESM. CVE-2017-18196 It was discovered that Leptonica incorrectly handled certain input arguments. An attacker could...
The vulnerability of the installer for the Intel Binary Configuration Tool, which allows a hacker to enhance their privileges
The vulnerability of the Intel Binary Configuration Tool’s configuration modification utility is related to incorrect handling of the search path. Exploiting this vulnerability can allow an attacker to gain increased privileges...
Andrew Harding SPIRE 安全漏洞
Andrew Harding SPIRE is an open source application by Andrew Harding. A toolchain that provides an API for establishing trust between software systems on various hosting platforms. A security vulnerability exists in SPIRE before versions 0.8.5, 0.9.4, 0.10.2, 0.11.3 and 0.12, which stems from...
The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector lies in the improper handling of the search path, allowing attackers to exploit their privileges.
The vulnerability of the MPI process tracing tools Intel Trace Analyzer and Collector is related to incorrect handling of the search path. Exploiting this vulnerability can allow attackers to gain increased privileges...
CVE-2020-27862
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of D-Link DVA-2800 and DSL-2888A routers. Authentication is not required to exploit this vulnerability. The specific flaw exists within the dhttpd service, which listens on TCP port 8008 by...
The vulnerability of the ColdFusion software platform, related to incorrect handling of the path to libraries’ DLL files, allows attackers to escalate their privileges.
The vulnerability of the ColdFusion software platform is related to incorrect handling of the path for accessing DLL libraries. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2021-1240
A vulnerability in the loading process of specific DLLs in Cisco Proximity Desktop for Windows could allow an authenticated, local attacker to load a malicious library. To exploit this vulnerability, the attacker must have valid credentials on the Windows system. This vulnerability is due to...
Cisco Proximity Desktop for Windows Code Issue Vulnerability
Desk is a writing, blogging, and note-taking application for individual developers.Microsoft Windows is a desktop operating system from Microsoft Corporation in the United States. A security vulnerability exists in Cisco Proximity Desktop for Windows, which stems from incorrect handling of...
CVE-2020-27644
The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote authenticated users and local users to gain elevated privileges by placing a malicious cryptbase.dll file in %WINDIR%\Temp...
CVE-2020-27644
The Inventory module of the 1E Client 5.0.0.745 doesn't handle an unquoted path when executing %PROGRAMFILES%\1E\Client\Tachyon.Performance.Metrics.exe. This may allow remote authenticated users and local users to gain elevated privileges by placing a malicious cryptbase.dll file in %WINDIR%\Temp...
The vulnerability of the DLL library loading mechanism of the Cisco Webex Teams software for Windows allows a malicious actor to load a malicious library into the system.
The vulnerability of the DLL library loading mechanism for Cisco Webex Teams software for Windows is related to errors in processing path handling for directories. Exploiting this vulnerability can allow an attacker to load the malicious library into memory...