CVE-2021-42713

Splashtop Remote Client Personal Edition through 3.4.6.1 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42714

Splashtop Remote Client Business Edition through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

Directory traversal

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

Splashtop Streamer through 3.4.8.3 creates a Temporary File in a Directory with Insecure Permissions...

CVE-2021-42712

The CVE-2021-42712 issue affects Splashtop Streamer up to version 3.4.8.3, where the application creates temporary files in a directory with insecure permissions. This root cause can lead to unauthorized access to temporary data and potential impact to confidentiality, integrity, and availability...

GHSA-X5M6-JH4R-34MV Hub Package Arbitrary File Overwrite

The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...

Hub Package Arbitrary File Overwrite

The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...

Trend Micro Apex One 后置链接漏洞

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. Trend Micro Apex One suffers from a backlink vulnerability that arises from an application not properly controlling the consumption of...

PT-2022-11669 · Splashtop · Splashtop Remote Client

Name of the Vulnerable Software and Affected Versions: Splashtop Remote Client Business Edition versions 3.4.8.3 and earlier Description: The issue is related to the creation of a temporary file in a directory with insecure permissions. This could potentially lead to security issues, but specific...

Splashtop Streamer 安全漏洞

Splashtop Streamer is a remote access and remote support software from the American company Splashtop. It is installed on the computer on the controlled end. A security vulnerability exists in Splashtop Streamer that stems from Splashtop Streamer version 3.4.8.3 creating temporary files in...

Splashtop Remote Client 安全漏洞

Splashtop Remote Client is a remote access and remote support software from Splashtop USA. A security vulnerability exists in Splashtop Remote Client that originates from. the Splashtop Remote Client creates temporary files in a directory with insecure permissions...

Hub Package Arbitrary File Overwrite

The am function in lib/hub/commands.rb in hub before 1.12.1 allows local users to overwrite arbitrary files via a symlink attack on a temporary patch file...

Vmware Cloud Foundation 输入验证错误漏洞

Vmware VMware Cloud Foundation is an all-in-one hybrid cloud platform from Vmware. The platform includes features such as operations automation, infrastructure auto-configuration, and integrated lifecycle management. An input validation error vulnerability exists in Vmware Cloud Foundation, which...

Trend Micro Apex One 后置链接漏洞

Trend Micro Apex One is a suite of endpoint security protection software from Trend Micro that provides automated threat detection and response capabilities. Trend Micro Apex One suffers from a backlink vulnerability that arises from an application not properly controlling the consumption of...

PT-2022-13281 · Wireshark +5 · Wireshark +5

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.4.0 through 3.4.11 Wireshark versions 3.6.0 through 3.6.1 Description: The issue is related to an infinite loop in the RTMPT protocol dissector, which can be exploited to cause a denial of service. This can be achieved...

OESA-2022-1523 aide security update

AIDE Advanced Intrusion Detection Environment is a file and directory integrity checker. It creates a database from the regular expression rules that it finds from the config files. Once this database is initialized it can be used to verify the integrity of the files. Security Fixes: AIDE before...

PT-2022-10327 · Tokheim · Tokheim Profleet Dialog

Name of the Vulnerable Software and Affected Versions: Tokheim Profleet DiaLOG version 11.005.02 Description: The issue is related to SQL Injection. The component affected is the Field UserLogin parameter on the logon page. Recommendations: For Tokheim Profleet DiaLOG version 11.005.02, consider...