CVE-2020-7684

This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation...

CVE-2020-7684 Directory Traversal

This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation...

CVE-2020-7684

CVE-2020-7684 affects the npm package rollup-plugin-serve. The vulnerability is a path traversal in the readFile operation due to lack of path sanitization, allowing access to files outside the destination. Reported impact includes information disclosure and potential file access; exploitation de...

CVE-2020-7684

This affects all versions of package rollup-plugin-serve. There is no path sanitization in readFile operation...

July 14, 2020—KB4565536 (Monthly Rollup)

None None...

July 14, 2020—KB4565541 (Monthly Rollup)

None None...

node-wakeup (0.1.0) potentially affected by CVE-2020-7684 via rollup-plugin-serve-favicon (0.4.7)

rollup-plugin-serve-favicon NPM version 0.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on rollup-plugin-serve-favicon and may be impacted: - node-wakeup 0.1.0 Source cves: CVE-2020-7684 Source advisory: SNYK:JS-ROLLUPPLUGINSERVEFAVICON-585950...

@ahone/svg2canvas (>=0.0.1, <=0.0.7), @aliyun-sls/sls-app-loader (>=0.0.12, <=0.0.18) +360 more potentially affected by CVE-2020-7684 via rollup-plugin-serve (>=0.1.0, <=3.0.0)

rollup-plugin-serve NPM version =0.1.0, =0.0.1, =0.0.12, =0.1.0, =0.0.1-alpha.1, =0.0.2, =1.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =7.0.1, =7.0.1, =13.0.0 and more Source cves: CVE-2020-7684 Source advisory: SNYK:JS-ROLLUPPLUGINSERVE-585897...

Directory Traversal

Overview rollup-plugin-serve-favicon is a rollup plugin to serve bundles. Affected versions of this package are vulnerable to Directory Traversal. There is no path sanitization in readFile operation. PoC by JHU System Security Lab Step 1: start a server var server = require"rollup-plugin-serve";...

Directory Traversal

Overview rollup-plugin-serve is a rollup plugin to serve the bundle. Affected versions of this package are vulnerable to Directory Traversal. There is no path sanitization in readFile operation. PoC by JHU System Security Lab Step 1: start a server var server = require"rollup-plugin-serve"; serve...

@ahone/svg2canvas (>=0.0.1, <=0.0.7), @lx-frontend/svg2canvas (0.0.1) +2 more potentially affected by CVE-2020-7683 via rollup-plugin-server (0.7.0)

rollup-plugin-server NPM version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on rollup-plugin-server and may be impacted: - @ahone/svg2canvas =0.0.1, =9.1.0, =9.1.2 Source cves: CVE-2020-7683 Source advisory: SNYK:JS-ROLLUPPLUGINSERVER-590123...

Directory Traversal

Overview rollup-plugin-server is a rollup plugin to serve the bundle. Affected versions of this package are vulnerable to Directory Traversal. There is no path sanitization in readFile operation performed inside the readFileFromContentBase function. PoC by JHU System Security Lab 1. Create a serv...

June 9, 2020—KB4561612 (Monthly Rollup)

None None...

Description of Update Rollup 2 for System Center 2012 Service Pack 1

Discusses the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 Service Pack 1.IntroductionThis article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 Service Pack 1 SP1. Additionally, this article contains the installation...

Microsoft Dynamics CRM 2011 Update Rollup 13

Microsoft Dynamics CRM 2011 Update Rollup 13 INTRODUCTION Update Rollup 13 for Microsoft Dynamics CRM 2011 is now available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...

Microsoft Dynamics CRM 2011 Update Rollup 11

Microsoft Dynamics CRM 2011 Update Rollup 11 INTRODUCTION Update Rollup 11 for Microsoft Dynamics CRM 2011 is available. This article describes the hotfixes and updates that are included in this update rollup. This update rollup is available for all languages that are supported by Microsoft...

Update Rollup 7 for System Center 2012 R2 Data Protection Manager

Update Rollup 7 for System Center 2012 R2 Data Protection Manager Notice for users who installed Update Rollup 7 earlier than August 21, 2015 We had an issue with Update Rollup 7 in which expired recovery points were not getting cleaned up, and the release was pulled back. The update rollup was...

Update Rollup 6 for System Center 2012 R2 Data Protection Manager

Update Rollup 6 for System Center 2012 R2 Data Protection Manager Introduction This article describes the issues that are fixed in Update Rollup 6 for Microsoft System Center 2012 R2 Data Protection Manager. Additionally, this article contains the installation instructions for Update Rollup 6 for...

Description of Update Rollup 2 for System Center 2012 R2 Data Protection Manager

Description of Update Rollup 2 for System Center 2012 R2 Data Protection Manager This update rollup was re-released on May 20, 2014 to resolve a "DPMAMService" crash that occurred if the original update KB 2958100 was applied. If you already installed Update Rollup 2 on your Windows Server 2003...

Description of Update Rollup 2 for System Center 2012 Service Pack 1

Description of Update Rollup 2 for System Center 2012 Service Pack 1 Introduction This article describes the issues that are fixed in Update Rollup 2 for Microsoft System Center 2012 Service Pack 1 SP1. Additionally, this article contains the installation instructions for Update Rollup 2 for Syst...