292 matches found
CVE-2020-11979: Creation of Temporary File in Directory with Insecure Permissions
As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the fixcrlf task deleted the temporary file and created a new one without said protection, effectively nullifying the...
PT-2020-5479
Name of the Vulnerable Software and Affected Versions Apache Ant versions prior to 1.10.8 Description The issue is related to the implementation of the fixcrlf class in Apache Ant, which is used for automating the build process of software products. It involves insufficient cleaning of special...
Design/Logic Flaw
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...
CVE-2020-1945
Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...
Information Disclosure
conga is vulnerable to information disclosure. An attacker is able to retrieve passwords from the source file of the web page as the passwords are found in the Value attribute of a password entry field...
CVE-2019-19796
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
CVE-2019-19796
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
UBUNTU-CVE-2019-19796
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
CVE-2019-19796
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
CVE-2019-19796
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
CVE-2019-19796
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
CVE-2019-19796: Out-of-bounds Write
Yabasic 2.86.2 has a heap-based buffer overflow in myformat in function.c via a crafted BASIC source file...
PT-2019-15964
Name of the Vulnerable Software and Affected Versions Yabasic version 2.86.2 Description A heap-based buffer overflow issue exists in the myformat function within function.c due to a crafted BASIC source file. Recommendations For Yabasic version 2.86.2, at the moment, there is no information abou...
CVE-2019-19720
Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file...
CVE-2019-19720
Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file...
CVE-2019-19720
Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file...
PT-2019-15926
Name of the Vulnerable Software and Affected Versions Yabasic version 2.86.1 Description A heap-based buffer overflow issue exists in the yylex function, located in flex.c, which can be triggered by a crafted BASIC source file. Recommendations For Yabasic version 2.86.1, consider avoiding the use...
CVE-2019-19720: Out-of-bounds Write
Yabasic 2.86.1 has a heap-based buffer overflow in the yylex function in flex.c via a crafted BASIC source file...
