About Apache Struts2（S2-045）vulnerability briefings-vulnerability warning-the black bar safety net

Recently, the national information security vulnerabilities library CNNVD received on the Apache Struts2 （S2-045 remote code execution vulnerability CNNVD-201703-152 the case of the message send. Because the vulnerability affects a wide range of hazard level high, the national information securit...

The vulnerability of the gettext library, which allows a hacker to re-write certain files

The vulnerability of the Autopoint and gettextize scripts in the gettext library related to errors in the code. Exploiting this vulnerability allows an attacker to re-write certain files by manipulating symbolic references to temporary files...

Directory Traversal

rythm-engine is vulnerable to directory traversal attacks. This vulnerability is caused because rythm-engine uses a hard-coded temporary directory...

DEBIAN-CVE-2017-5551

The simplesetacl function in fs/posixacl.c in the Linux kernel before 4.9.6 preserves the setgid bit during a setxattr call involving a tmpfs filesystem, which allows local users to gain group privileges by leveraging the existence of a setgid program with restrictions on execute permissions. NOT...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

Memory corruption

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

DEBIAN-CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

CVE-2016-6188

Memory leak in SOGo 2.3.7 allows remote attackers to cause a denial of service memory consumption via a large number of attempts to upload a large attachment, related to temporary files...

Zoneminder 1.291.30 - Cross-Site Scripting SQL Injection Session Fixation Cross-Site Request Forgery

Zoneminder 1.291.30 - Cross-Site Scripting SQL Injection Session Fixation Cross-Site Request Forgery Source: https://www.foxmole.com/advisories/foxmole-2016-07-05.txt -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 === FOXMOLE - Security Advisory 2016-07-05 === Zoneminder multiple vulnerabilities...

CVE-2016-2941

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

Code injection

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

CVE-2016-2941

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

CVE-2016-2941

The CVE-2016-2941 entry impacts IBM UrbanCode Deploy. Affected behavior is that during step execution, the product creates temporary files which may contain sensitive information, including passwords, that could be read by a local user. The documents do not provide specifics on vulnerable version...

CVE-2016-2941

IBM UrbanCode Deploy creates temporary files during step execution that could contain sensitive information including passwords that could be read by a local user...

UBUNTU-CVE-2016-5026

hs.py in OnionShare before 0.9.1 allows local users to modify the hiddenservice by pre-creating the /tmp/onionshare directory...

UPM 5.2: Getting temporary profiles

Getting temporary profiles...

Lenovo XClarity Administrator Elevation of Privilege Vulnerability

Lenovo XClarity Administrator LXCA is a centralized resource management solution from Lenovo, China. The solution supports simplified infrastructure management, faster server response, and improved performance of Lenovo server systems. An elevation of privilege vulnerability exists in Lenovo...

Updated golang package fixes security vulnerability

The net/http package's Request.ParseMultipartForm method starts writing to temporary files once the request body size surpasses the given "maxMemory" limit. It was possible for an attacker to generate a multipart request crafted such that the server ran out of file descriptors...