1796 matches found
SUSE SLED15 / SLES15 Security Update : cf-cli (SUSE-SU-2019:1220-1)
"This update for cf-cli fixes the following issues : cf-cli was updated: to version 6.43.0 bsc1132242 Enhancements : cf curl supports a new --fail flag primarily for scripting purposes which returns exit code 22 for server errors story Improves cf delete-orphaned-routes such that it uses a...
EulerOS 2.0 SP5 : php (EulerOS-SA-2019-1334)
According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented,...
EulerOS 2.0 SP2 : php (EulerOS-SA-2019-1332)
According to the versions of the php packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented,...
CVE-2019-11513
The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...
CVE-2019-11513
The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...
Design/Logic Flaw
The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...
CVE-2019-11513
The File Manager in CMS Made Simple through 2.2.10 has Reflected XSS via the "New name" field in a Rename action...
Update for Windows 10, version 1607 and Windows Server 2016: April 25, 2019
None None...
April 25, 2019—KB4498375 (OS Build 10240.18187)
None None...
CVE-2019-7174
Roxy Fileman 1.4.5 allows attackers to execute renamefile.php aka Rename File, createdir.php aka Create Directory, fileslist.php aka Echo File List, and movefile.php aka Move File operations...
PHP 7.2.x < 7.2.16 Multiple vulnerabilities.
According to its banner, the version of PHP running on the remote web server is 7.2.x prior to 7.2.16. It is, therefore, affected by multiple vulnerabilities: - Uninitialized reads in the EXIF component of PHP due to the mishandling of data in exifprocessIFDinMAKERNOTE, and exifprocessIFDinTIFF...
[SECURITY] Fedora 29 Update: ntfs-3g-2017.3.23-11.fc29
NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...
A vulnerability in the tmpreaper software exists due to the simultaneous execution using a shared resource with incorrect synchronization. This allows attackers to increase their privileges.
The vulnerability in the tmpreaper software is related to the behavior during mounting through the rename function. Exploiting this vulnerability can allow a hacker to enhance their privileges or place files in any arbitrary location within the file system hierarchy...
Debian DLA-1741-1 : php5 security update
Several vulnerabilities have been found in php5, a server-side, HTML-embedded scripting language. CVE-2019-9637 rename across the device may allow unwanted access during processing. CVE-2019-9638, CVE-2019-9639 Uninitialized read in exifprocessIFDinMAKERNOTE. CVE-2019-9640 Invalid Read on...
The vulnerability of the ext4_xattr_set_entry() function in the Linux operating system allows a hacker to cause a service failure.
The vulnerability of the ext4xattrsetentry function in the Linux operating system is related to the use of memory after it is freed. Exploiting this vulnerability could allow an attacker to cause a service failure during the renaming of a file in a specially created ext4 file system image...
PHP Unauthorized Data Access Vulnerability
PHP is a general-purpose open source scripting language. The syntax absorbs the characteristics of the C language , Java and Perl , easy to learn , widely used , mainly in the field of Web development . PHP has an unauthorized data access vulnerability. The vulnerability stems from the way the fi...
CVE-2019-9637
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...
CVE-2019-9637
An issue was discovered in PHP before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Due to the way rename across filesystems is implemented, it is possible that file being renamed is briefly available with wrong permissions while the rename is ongoing, thus enabling unauthorized users to...
CVE-2019-9637
CVE-2019-9637 concerns a PHP file-rename across filesystems: during the rename, the target may briefly have incorrect permissions, potentially allowing unauthorized data access. The initial description specifies affected PHP versions: before 7.1.27, 7.2.x before 7.2.16, and 7.3.x before 7.3.3. Co...
