apache-mina-sshd: information exposure in SFTP server implementations

A flaw was found in Apache Mina SSHD that could be exploited on certain SFTP servers implemented using the Apache Mina RootedFileSystem. This issue could permit authenticated users to view information outside of their permissions scope...

OESA-2024-1079 apache-sshd security update

Apache SSHD is a 100% pure java library to support the SSH protocols on both the client and server side. Security Fixes: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use ...

apache-mina-sshd: information exposure in SFTP server implementations

A flaw was found in Apache Mina SSHD that could be exploited on certain SFTP servers implemented using the Apache Mina RootedFileSystem. This issue could permit authenticated users to view information outside of their permissions scope...

apache-mina-sshd: information exposure in SFTP server implementations

A flaw was found in Apache Mina SSHD that could be exploited on certain SFTP servers implemented using the Apache Mina RootedFileSystem. This issue could permit authenticated users to view information outside of their permissions scope...

apache-mina-sshd: information exposure in SFTP server implementations

A flaw was found in Apache Mina SSHD that could be exploited on certain SFTP servers implemented using the Apache Mina RootedFileSystem. This issue could permit authenticated users to view information outside of their permissions scope...

Information Disclosure

org.apache.sshd:sshd-common and org.apache.sshd:sshd-sftp are vulnerable to Information Disclosure. SFTP servers using the library with a RootedFileSystem may reveal the existence of items outside the rooted tree through parent navigation or symlinks, resulting in disclosure of sensitive...

GHSA-MJMQ-GWGM-5QHM Apache MINA SSHD information disclosure vulnerability

Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Software Foundation Apache MINA. In SFTP servers implemented using Apache MINA SSHD that use a RootedFileSystem, logged users may be able to discover "exists/does not exist" information about items outside the root...

Sonos One Speaker 安全漏洞

Sonos One Speaker is a smart speaker from Sonos USA. A security vulnerability exists in Sonos One Speaker version 70.3-35220, which stems from a failure to properly validate the length of user-supplied data. An attacker could exploit the vulnerability to execute code in a rooted environment...

Sonos One Speaker 资源管理错误漏洞

Sonos One Speaker is a Smart Speaker from Sonos, USA. Sonos One Speaker version 70.3-35220 suffers from a resource management error vulnerability that stems from not verifying the existence of an object before performing an operation on it, which can be exploited by an attacker to execute code in...

Sonos One Speaker 缓冲区错误漏洞

Sonos One Speaker is a smart speaker from Sonos USA. Sonos One Speaker version 70.3-35220 suffers from a buffer error vulnerability that stems from a lack of proper validation of user-supplied data, which could result in a read beyond the end of the allocated buffer, which could be exploited by a...

One Speaker 输入验证错误漏洞

Sonos One Speaker is a Smart Speaker from Sonos, USA. An input validation error vulnerability exists in Sonos One Speaker version 70.3-35220, which stems from a lack of proper validation of user-supplied data, and can be exploited by an attacker to execute arbitrary code in a rooted context...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

CVE-2023-20857

VMware Workspace ONE Content contains a passcode bypass vulnerability. A malicious actor, with access to a users rooted device, may be able to bypass the VMware Workspace ONE Content passcode...

JSA10553 - 2013-03: Security Bulletin: Pulse Secure Mobile: Android client privilege escalation

Edit: 4th of March 2024 - This isn't an active SA and any new edits are part of an article maintenance project. A security issue has been found in the Pulse Secure Mobile for Android. This issue could only be carried out on an Android phone that was "rooted". An issue in the Pulse Secure Mobile f...

Netatalk安全漏洞

Netatalk is open source software that provides AFP file server functionality for Classic Mac OS and macOS on Unix-like OS. A security vulnerability exists in Netatalk that stems from a failure to properly validate the length of user-supplied data before copying it to a fixed-length heap-based...

Corel Parallels Desktop 竞争条件问题漏洞

Corel Parallels Desktop is a suite of virtual machine software for the macOS platform from Corel Canada. Corel Parallels Desktop version 17.1.1 suffers from a Competing Conditions Issue vulnerability that originates from allowing a local attacker to elevate privileges on an affected installation ...

Parallels Access 代码问题漏洞

Parallels Access is a parallel access application from Parallels USA. enabling the fastest, easiest, and most reliable remote access to your computer from anywhere. A code issue vulnerability exists in Parallels Access Agent version 6.5.4 39316 that stems from This vulnerability allows a local...

NETGEAR R6700v3 操作系统命令注入漏洞

NETGEAR R6700v3 is the Nighthawk AC1750 Smart Dual Band Gigabit Router from Netgear USA. The NETGEAR R6700v3 suffers from a command injection vulnerability that stems from a lack of proper authentication before executing a system call using a user-supplied string. An attacker could exploit the...