MiracleLinux 7 : flatpak-1.0.9-11.el7 (AXSA:2021-1620:05)

The remote MiracleLinux 7 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1620:05 advisory. flatpak: file forwarding feature can be used to gain unprivileged access to files CVE-2021-21381 Tenable has extracted the preceding description block direct...

MiracleLinux 8 : flatpak-1.6.2-6.el8 (AXSA:2021-1632:06)

The remote MiracleLinux 8 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2021-1632:06 advisory. flatpak: file forwarding feature can be used to gain unprivileged access to files CVE-2021-21381 Tenable has extracted the preceding description block direct...

EUVD-2002-0867

Malware in sbrugna...

CVE-2025-27677

Vasion Print formerly PrinterLogic before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-2022-002...

Vasion Print 安全漏洞

Vasion Print is a SaaS-based, cloud-hosted application from Vasion for managing and deploying printers. A security vulnerability exists in Vasion Print versions prior to 22.0.843 Application 20.0.1923, which stems from a symbolic link that could lead to unprivileged file interactions...

flatpak: "file forwarding" feature can be used to gain unprivileged access to files

A sandbox escape flaw was found in the way flatpak handled special tokens in ".desktop" files. This flaw allows an attacker to gain access to files that are not ordinarily allowed by the app's permissions. The highest threat from this vulnerability is to confidentiality and integrity...

CVE-2019-1381: Exposure of Sensitive Information to an Unauthorized Actor

An information disclosure vulnerability exists when the Windows Servicing Stack allows access to unprivileged file locations, aka 'Microsoft Windows Information Disclosure Vulnerability'...

CVE-2017-9136: Use of a Broken or Risky Cryptographic Algorithm

An issue was discovered on Mimosa Client Radios before 2.2.3. In the device's web interface, there is a page that allows an attacker to use an unsanitized GET parameter to download files from the device as the root user. The attacker can download any file from the device's filesystem. This can be...

Digital Unix 4.0x msgchk multiple vulnerabilities

hi everyone. there were multiple vulnerabilities in "/usr/bin/mh/msgchk" on digital unix 4.0x it's a mail utility - check for messages only available within the message handlin system, mh two vulnerabilities were found. /usr/bin/mh/msgchk is affected to buffer overflow vulnerability -- snip -- $...