CWE-668 Archives - CVE Vulnerability

CVE-2008-7291

Sun, 26 Feb 2023 09:11:57 +0000

gri before 2.12.18 generates temporary files in an insecure way.

The post CVE-2008-7291 appeared first on CVE Vulnerability.

CVE-2008-2544

Sun, 26 Feb 2023 09:09:33 +0000

Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise.

The post CVE-2008-2544 appeared first on CVE Vulnerability.

CVE-2007-3915

Sun, 26 Feb 2023 09:06:57 +0000

Mondo 2.24 has insecure handling of temporary files.

The post CVE-2007-3915 appeared first on CVE Vulnerability.

CVE-2018-8040

Sun, 26 Feb 2023 06:51:16 +0000

Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to allow access. This affects Apache Traffic Server (ATS) versions 6.0.0 to 6.2.2 and 7.0.0 to 7.1.3. To resolve this issue users running 6.x should upgrade to 6.2.3 or later versions and 7.x users should upgrade to 7.1.4 or later versions.

The post CVE-2018-8040 appeared first on CVE Vulnerability.

CVE-2018-7846

Sun, 26 Feb 2023 06:51:11 +0000

A CWE-501: Trust Boundary Violation vulnerability on connection to the Controller exists in all versions of the Modicon M580, Modicon M340, Modicon Quantum and Modicon Premium which could cause unauthorized access by conducting a brute force attack on Modbus protocol to the controller.

The post CVE-2018-7846 appeared first on CVE Vulnerability.

CVE-2018-7479

Sun, 26 Feb 2023 06:51:03 +0000

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.php.

The post CVE-2018-7479 appeared first on CVE Vulnerability.

CVE-2018-7072

Sun, 26 Feb 2023 06:50:55 +0000

A remote bypass of security restrictions vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.

The post CVE-2018-7072 appeared first on CVE Vulnerability.

CVE-2018-7073

Sun, 26 Feb 2023 06:50:55 +0000

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.

The post CVE-2018-7073 appeared first on CVE Vulnerability.

CVE-2018-6910

Sun, 26 Feb 2023 06:50:52 +0000

DedeCMS 5.7 allows remote attackers to discover the full path via a direct request for include/downmix.inc.php or inc/inc_archives_functions.php.

The post CVE-2018-6910 appeared first on CVE Vulnerability.

CVE-2018-6880

Sun, 26 Feb 2023 06:50:51 +0000

EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/connect.php.

The post CVE-2018-6880 appeared first on CVE Vulnerability.