13239 matches found
Design/Logic Flaw
A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, SimpliVity OmniCube, SimpliVity OmniStack for Cisco, SimpliVity OmniStack for Lenovo and SimpliVity OmniStack for Dell nodes. Two now...
CVE-2019-11993
CVE-2019-11993 affects HPE SimpliVity 380 Gen 9/10, 380 Gen 10 G, 2600 Gen 10, OmniCube/OmniStack variants for Cisco/Lenovo/Dell. The root cause is two now-deprecated APIs that run with root privileges, accept a file name path, and can create or delete arbitrary files on the nodes. These APIs are...
Xiaomi Cameras Connected to Google Nest Expose Video Feeds From Others
Internet-connected devices have been one of the most remarkable developments that have happened to humankind in the last decade. Although this development is a good thing, it also stipulates a high security and privacy risk to personal information. In one such recent privacy mishap, smart IP...
Code injection
The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...
CVE-2012-5663
The isearch package textproc/isearch before 1.47.01nb1 uses the tempnam function to create insecure temporary files into a publicly-writable area /tmp...
PT-2019-5245 · Graphicsmagick +3 · Graphicsmagick +3
Name of the Vulnerable Software and Affected Versions: GraphicsMagick version 1.4 snapshot-20190403 Q8 Description: The issue is related to a use-after-free in the ThrowException and ThrowLoggedException functions of magick/error.c. This could potentially allow a remote attacker to gain...
EulerOS 2.0 SP5 : keepalived (EulerOS-SA-2019-2692)
According to the version of the keepalived package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - keepalived 2.0.8 didn't check for pathnames with symlinks when writing data to a temporary file upon a call to PrintData or PrintStats. This...
CVE-2018-6914
It was found that the tmpdir and tempfile modules did not sanitize their file name argument. An attacker with control over the name could create temporary files and directories outside of the dedicated directory...
SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:3347-1)
This update for MozillaFirefox fixes the following issues : Mozilla Firefox was updated to 68.3esr MFSA 2019-37 bsc1158328 Security issues fixed : CVE-2019-17008: Fixed a use-after-free in worker destruction bmo1546331 CVE-2019-13722: Fixed a stack corruption due to incorrect number of arguments ...
SUSE-SU-2019:3347-1 Security update for MozillaFirefox
This update for MozillaFirefox fixes the following issues: Mozilla Firefox was updated to 68.3esr MFSA 2019-37 bsc1158328 Security issues fixed: - CVE-2019-17008: Fixed a use-after-free in worker destruction bmo1546331 - CVE-2019-13722: Fixed a stack corruption due to incorrect number of argument...
EulerOS 2.0 SP3 : python-pillow (EulerOS-SA-2019-2654)
According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Buffer overflow in the ImagingFliDecode function in libImaging/FliDecode.c in Pillow before 3.1.1 allows remote attackers to cause a denia...
CVE-2014-2387
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
CVE-2014-2387
CVE-2014-2387 affects Pen 0.18.0, which has insecure temporary file creation. The vulnerability allows local attackers to exploit symlink attacks via temporary files such as "/tmp/webfile.html" and "/tmp/penctl.cgi", potentially corrupting system files. The provided documents state the issue but ...
CVE-2014-2387
Pen 0.18.0 has Insecure Temporary File Creation vulnerabilities...
Updated firefox packages fix security vulnerabilities
Updated firefox packages fix security vulnerabilities: Stack corruption due to incorrect number of arguments in WebRTC code. CVE-2019-13722 Buffer overflow in plain text serializer. CVE-2019-17005 Use-after-free in worker destruction. CVE-2019-17008 Updater temporary files accessible to...
Trend Micro Deep Security Agent 11 Arbitrary File Overwrite
Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Author : Peter Lapp Exploit Date: 2019-12-05 Vendor Homepage : https://www.trendmicro.com/enus/business.html Link Software : https://help.deepsecurity.trendmicro.com/software.html?regs=NABU&prodid=1716 Tested on...
Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite
Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Author : Peter Lapp Exploit Date: 2019-12-05 Vendor Homepage : https://www.trendmicro.com/enus/business.html Link Software : https://help.deepsecurity.trendmicro.com/software.html?regs=NABU&prodid=1716 Tested on...
Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit
Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Author : Peter Lapp Vendor Homepage : https://www.trendmicro.com/enus/business.html Link Software : https://help.deepsecurity.trendmicro.com/software.html?regs=NABU&prodid=1716 Tested on OS: v11.0.582 and...
UBUNTU-CVE-2012-1105
An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...
