Tobias Ospelt

An issue was discovered in the `tarExtract` function, which implements TAR file extraction and processes files within an archive that have relative or absolute file paths. This could lead to unexpected and undocumented behavior, resulting in a directory traversal and associated unexpected behavior. A developer using the `tarExtract` function may expect that the function will strip leading slashes from absolute paths or stop processing when encountering relative paths that are outside of the extraction path, unless otherwise forced. The vulnerability may allow a remote attacker to execute arbitrary commands by injecting a malicious tar file.

An issue in the CPIO command of Busybox allows attackers to execute a directory traversal.

A vulnerability was found in the /ebics-server/ebics.aspx component of Crealogix EBICS, which can be exploited to conduct a cross-site scripting (XSS) attack. The attack may be launched remotely. The issue arises due to inadequate protection of the web page structure.

A critical issue has been found in the software, affecting the `getCurrentDBVersion` function in the `SAMwinLIBVB.dll` library of the database handler. This leads to sql injection. The issue has been publicly disclosed and may be exploited.

A critical issue was found in the Password Handler component, specifically affecting the `passwordScramble` function in the `SAMwinLIBVB.dll` library. This is due to an incorrect implementation of a hashing function, leading to predictable authentication possibilities.

A critical issue affects the function `getCurrentDBVersion` in the library `SAMwinLIBVB.dll` of the credential handler, allowing authentication with hard-coded credentials.

A post-authentication privilege escalation issue in the web application of Combodo iTop allows regular authenticated users to access and modify information with administrative privileges. This occurs when the application fails to follow the HTTP Location header in server responses.

The issue is related to the Sound component of Oracle Java SE, Java SE Embedded, and JRockit, and is caused by inadequate access control. It allows an unauthenticated attacker with network access via multiple protocols to compromise the system, resulting in a partial denial of service (partial DOS). This vulnerability applies to Java deployments that load and run untrusted code and rely on the Java sandbox for security. It can also be exploited through APIs in the specified component.

The issue is related to insufficient access control in the Scripting component of Java SE, Java SE Embedded, and JRockit, allowing an unauthenticated attacker with network access via multiple protocols to compromise these systems. Successful attacks can result in the takeover of Java SE, Java SE Embedded, and JRockit. This vulnerability applies to Java deployments that load and run untrusted code and rely on the Java sandbox for security. It can also be exploited through APIs in the specified component.

A carefully crafted file can trigger an infinite loop in Apache Tika's BPGParser.

The issue concerns the lack of signature protection for the Authentication Delegation API intent in the Good for Enterprise application. Additionally, the Good Dynamic application activation process fails to detect malicious activation attempts involving modified names starting with a `com.good.gdgma` substring. This could allow an attacker to gain access to intranet data, but only if a malicious Android application has already been downloaded by the user.