CVE-2022-48667

In the Linux kernel, the following vulnerability has been resolved: smb3: fix temporary data corruption in insert range insert range doesn't discard the affected cached region so can risk temporarily corrupting file data. Also includes some minor cleanup avoiding rereading inode size repeatedly...

CVE-2022-48668

CVE-2022-48668 relates to the Linux kernel SMB3 implementation. The issue was that collapse range did not discard the affected cached region, risking temporary data corruption of the file during operations (as observed in xfstest generic/031). The fix stabilizes collapse range behavior and also i...

Linux kernel 安全漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from temporary data corruption within the scope of a crash...

RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2024:0777)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:0777 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

RHEL 8 : jenkins and jenkins-2-plugins (RHSA-2023:3622)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3622 advisory. Jenkins is a continuous integration server that monitors executions of repeated jobs, such as building a software project or jobs run by cro...

RHEL 8 : Red Hat Virtualization (RHSA-2023:0759)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2023:0759 advisory. PostgreSQL is an advanced object-relational database management system. The postgresql-jdbc package includes the .jar files needed for Java programs ...

RHEL 5 / 6 : Red Hat Storage 2.0 security, update #3 (Low) (RHSA-2012:1456)

The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2012:1456 advisory. - GlusterFS: insecure temporary file creation CVE-2012-4417 Note that Nessus has not tested for this issue but has instead relied only on the...

CVE-2023-26603

JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer...

CVE-2023-26603

JumpCloud Agent before 1.178.0 Creates a Temporary File in a Directory with Insecure Permissions. This allows privilege escalation to SYSTEM via a repair action in the installer...

PT-2024-12106 · Jumpcloud · Jumpcloud Agent

Name of the Vulnerable Software and Affected Versions: JumpCloud Agent versions prior to 1.178.0 Description: The issue allows privilege escalation to SYSTEM via a repair action in the installer. This is due to the creation of a temporary file in a directory with insecure permissions...

PT-2024-19509 · Setor Informatica · Setor Informatica Sistema Inteligente Para Laboratorios

Name of the Vulnerable Software and Affected Versions: Setor Informatica Sistema Inteligente para Laboratorios S.I.L. version 388 Description: The issue is related to a remote code execution RCE vulnerability. It can be triggered via a crafted POST request using the hmsg parameter. Recommendation...

CVE-2023-26603

Summary: JumpCloud Agent before 1.178.0 creates a temporary file in a directory with insecure permissions, enabling privilege escalation to SYSTEM via a repair action in the installer. This is evidenced across multiple sources (NVD/Red Hat/CNNVD/PT-Security/vulnrichment), which consistently descr...

PT-2024-24509 · Shenzhen Libituo Technology Co. · Lbt-T300-T400

Name of the Vulnerable Software and Affected Versions: Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 version 3.2 Description: A Buffer Overflow issue allows a local attacker to execute arbitrary code via the vpn client ip variable of the config vpn pptp function in the rc program. This enabl...

PT-2024-5123 · Tenda · Tenda W30E

Name of the Vulnerable Software and Affected Versions: Tenda W30E versions 1.0 through 1.0.1.25 Description: A critical issue has been found in the function fromWizardHandle of the file /goform/WizardHandle, which is related to a stack-based buffer overflow. The manipulation of the argument PPW c...

PT-2024-3049

Name of the Vulnerable Software and Affected Versions Cisco Adaptive Security Appliance ASA Software and Cisco Firepower Threat Defense FTD Software affected versions not specified Description A vulnerability in the management and VPN web servers for Cisco Adaptive Security Appliance ASA Software...

rubygem-activesupport: File Disclosure of Locally Encrypted Files

An insecure temporary file vulnerability was found in activesupport rubygem. Contents that will be encrypted are written to a temporary file that has the user’s current umask settings, possibly leading to information disclosure by other users on the same system...

PT-2024-5170 · Dell · Dell Repository Manager

Name of the Vulnerable Software and Affected Versions: Dell Repository Manager versions 3.4.2 through 3.4.4 Description: The issue is related to a Path Traversal vulnerability in the logger module of Dell Repository Manager. This vulnerability can be exploited by a local attacker with low...

PT-2024-17582 · Unknown · Watchdog Anti-Virus +1

Name of the Vulnerable Software and Affected Versions: Watchdog Antivirus version 1.6.415 Description: The issue is related to a Denial of Service vulnerability that can be triggered by exploiting the 0x80002014 IOCTL code of the wsdk-driver.sys driver. Recommendations: For Watchdog Antivirus...

PT-2024-3192 · D Link · D-Link Dir-822

Name of the Vulnerable Software and Affected Versions: D-Link DIR-822+ version 1.0.5 Description: The issue is related to a command injection vulnerability in the ftext function of the upload firmware.cgi script in the D-Link DIR-822+ firmware. This vulnerability is due to the lack of proper...

PT-2024-24133 · Unknown · Computer Laboratory Management System

Name of the Vulnerable Software and Affected Versions: Computer Laboratory Management System version 1.0 Description: The issue allows for SQL Injection via the "id" parameter of the "/admin/?page=user/manage user&id=6" API endpoint. This means an attacker could potentially inject malicious SQL...