Archive
27 May 2021
Vulnerabilities first published on this day (UTC), newest first.
10 results · Clear filters · Feed
-
High 7.8
The Adobe ColdFusion installer fails to set a secure access-control list (ACL) on the default installation directory, s…
-
High —
Listing of upload directory contents possible
There's an security issue in prosody-filer versions **< 1.0.1** which leads to unwanted directory listings of download directories. An attacker is able to list previous uploads of a certain user by shortening the URL and accessing a URL subdirectors other tha…
-
High 7.8
Improper Privilege Management in Spring Framework
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by (re)creating the temporary storage directory, a locally authenticated malicious user can read or modify fi…
-
High 7.8
Permissions bypass in pleaser
Failure to normalize the umask in please before 0.4 allows a local attacker to gain full root privileges if they are allowed to execute at least one command.
-
High 7.8
Permissions bypass in pleaser
pleaseedit in please before 0.4 uses predictable temporary filenames in /tmp and the target directory. This allows a local attacker to gain full root privileges by staging a symlink attack.
-
High 7.5
Action Pack contains Information Disclosure / Unintended Method Execution vulnerability
A possible information disclosure / unintended method execution vulnerability in Action Pack >= 2.0.0 when using the `redirect_to` or `polymorphic_url`helper with untrusted user input.
-
High 7.2
A vulnerability allowed multiple unrestricted uploads in Pulse Connect Secure before 9.1R11.4 that could lead to an aut…
KEV Nov 3, 2021 -
High 8.8
A command injection vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker…
KEV Nov 3, 2021 -
High 8.8
A buffer overflow vulnerability exists in Pulse Connect Secure before 9.1R11.4 allows a remote authenticated attacker t…
KEV Nov 3, 2021 -
High 7.6CVE-2021-30465 EPSS 10%
mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange a…