10311 matches found
LCDS LAquis SCADA 路径遍历漏洞
LCDS LAquis SCADA is a SCADA Data Acquisition and Supervisory Control system from the Brazilian company LCDS. The system is mainly used for data acquisition and process control of equipment that has communication technology. LCDS LAquis SCADA has a security vulnerability that allows an attacker t...
CVE-2020-21431: Undefined Security Weakness
HongCMS v3.0 contains an arbitrary file read and write vulnerability in the component /admin/index.php/template/edit...
CVE-2021-41578: Improper Limitation of a Pathname to a Restricted Directory
mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can trick a victim into importing a malicious mep file, then they gain the ability to write arbitrary files to OS locations where the user has permission. This would typically lead ...
PT-2021-23344
Name of the Vulnerable Software and Affected Versions LCDS LAquis SCADA versions 4.3.1.1085 and earlier Description The issue allows for a control bypass and path traversal. An attacker can exploit this by getting a victim to load a malicious els project file and use the play feature. This enable...
HongCMS 访问控制错误漏洞
HongCMS is an open source lightweight content management system CMS. An access control error vulnerability exists in HongCMS, which stems from the product's failure to add valid permission controls to the /admin/index.php/template/edit page. An attacker could cause arbitrary file reads and writes...
CVE-2021-41290
ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device...
CVE-2021-41290 ECOA BAS controller - Path Traversal-1
ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device...
CVE-2021-41290
ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device...
CVE-2021-41290: Unrestricted Upload of File with Dangerous Type
ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely set arbitrary values for location and content type and gain the possibility to execute arbitrary code on the affected device...
CVE-2021-3762
A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplying a crafted container image which, when scanned by Clair, allows for arbitrary file write on the filesystem, potentially allowing for remote code execution. Mitigation Mitigatio...
Clair 路径遍历漏洞
Clair is an open source project. It is used to statically analyze vulnerabilities in application containers currently including Oci and Docker. Clair suffers from a path traversal vulnerability that stems from a directory traversal vulnerability found in Clair's ClairCore engine. An attacker can...
CVE-2021-39827
Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation ...
CVE-2021-39827
Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation ...
Design/Logic Flaw
Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation ...
CVE-2021-39827 Adobe Digital Editions Installer flaw leads to Arbitrary File System Write
Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation ...
CVE-2021-39827: Creation of Temporary File in Directory with Insecure Permissions
Adobe Digital Editions 4.5.11.187646 and earlier are affected by an arbitrary file write vulnerability in the Digital Editions installer. An authenticated attacker could leverage this vulnerability to write an arbitrary file to the system. User interaction is required before product installation ...
SUSE-SU-2021:3170-1 Security update for SUSE Manager Server 4.2
This update fixes the following issues: branch-network-formula: - Use kernel parameters from PXE formula also for local boot cobbler - security issues fixed: - CVE-2021-40323: Fixed an arbitrary file disclosure/Template Injection bsc1189458 - CVE-2021-40324: Fixed an arbitrary file write bsc11894...
SUSE-SU-2021:3151-1 Security update for cobbler
This update for cobbler fixes the following issues: Security issues fixed: - CVE-2021-40323: Fixed an arbitrary file disclosure/Template Injection bsc1189458 - CVE-2021-40324: Fixed an arbitrary file write bsc1189458 - CVE-2021-40325: Fixed a problem with the token validation bsc1189458 - Please...
PT-2021-22860
Name of the Vulnerable Software and Affected Versions Cobbler versions prior to 3.3.0 Description The issue allows arbitrary file write operations via upload log data. Recommendations For versions prior to 3.3.0, update to version 3.3.0 or later to resolve the issue...