Arbitrary File Write

php-ews/php-ews is vulnerable to arbitrary file write. The vulnerability allows a malicious user to overwrite arbitrary files by sending a message containing an attachment with filename foo/../../../../../etc/passwd...

FreeBSD : NPM -- Multiple vulnerabilities (2a3588b4-ab12-11ea-a051-001b217b3468)

NPM reports : Global nodemodules Binary Overwrite Symlink reference outside of nodemodules Arbitrary File Write C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD VuXML database : Copyright 2003-2020 Jacques Vidrine and...

Zoom Client Arbitrary File Write (CVE-2020-6109)

An arbitrary file write vulnerability exists in Zoom Client. Successful exploitation of this vulnerability could result in code execution on the affected system...

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 (HU250) automation systems for transformer substations involves insecure management of privileges. This allows attackers to escalate their privileges and perform arbitrary file writing and deletion operations on the device.

The vulnerability of the microprogrammed control module software for Schneider Electric Easergy T300 HU250 automation systems for transformer substations is related to insecure privilege management. Exploiting this vulnerability allows an attacker to escalate their privileges and perform arbitrar...

Microsoft Edge Elevation of Privilege Vulnerability (CNVD-2020-61590)

Microsoft Edge is a web browser from the American company Microsoft that comes with systems after Windows 10. A security vulnerability exists in Microsoft Edge based on Chromium that stems from the Feedback extension not properly validating input. An attacker can exploit the vulnerability to writ...

CVE-2020-6109

An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, which could potentially be abused to achieve arbitrary code execution. An attacker needs to send a...

PT-2020-3652

Name of the Vulnerable Software and Affected Versions Zoom client version 4.6.10 Description An exploitable path traversal vulnerability exists in the Zoom client, which processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, potentially...

CVE-2020-6109: Improper Limitation of a Pathname to a Restricted Directory

An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat message can cause an arbitrary file write, which could potentially be abused to achieve arbitrary code execution. An attacker needs to send a...

Secure Computing SnapGear Management Console SG560 3.1.5 Arbitrary File Read / Write

Secure Computing SnapGear Management Console SG560 v3.1.5 Arbitrary File Read/Write Vendor: Secure Computing Corp. Product web page: http://www.securecomputing.com Affected version: 3.1.5u1 Summary: The SG gateway appliance range provides Internet security and privacy of communications for small...

Cisco Firepower Management Center Arbitrary Log File Write Vulnerability (cisco-sa-alfo-tHwFDmTE)

According to its self-reported version, Cisco Firepower Management Center is affected by an arbitrary file write vulnerability due to insufficient user input validation. An unauthenticated, remote attacker can exploit this to write arbitrary entries in the application's log file on the remote hos...

CVE-2020-3238: Improper Input Validation

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient input...

PT-2020-2679

Name of the Vulnerable Software and Affected Versions Cisco IOx affected versions not specified Description The issue is related to insufficient input validation of user-supplied application packages in the Cisco Application Framework component. This could allow an authenticated, remote attacker ...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview github.com/sassoftware/go-rpmutils/cpio is a package for parsing and extracting content from RPM files. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. The CPIO extraction functionality doesn't sanitize the paths of the archived...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview github.com/unknwon/cae/tz is a package that provides archiving functionality for .tar.gz archives. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. The ExtractTo function doesn't securely escape file paths in zip archives which...

Arbitrary File Write via Archive Extraction (Zip Slip)

Overview github.com/unknwon/cae/zip is a package that provides archiving functionality for .zip archives. Affected versions of this package are vulnerable to Arbitrary File Write via Archive Extraction Zip Slip. The ExtractTo function doesn't securely escape file paths in zip archives which inclu...

CVE-2020-1070

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1048...

CVE-2020-1195: Improper Input Validation

An elevation of privilege vulnerability exists in Microsoft Edge Chromium-based when the Feedback extension improperly validates input. An attacker who successfully exploited this vulnerability could write files to arbitrary locations and gain elevated privileges. The vulnerability by itself does...

The vulnerability in the Atlassian Confluence Server’s web server exists due to an incorrect path name limitation for the restricted access catalog. This allows a hacker to write files anywhere and execute any code.

The vulnerability of the Atlassian Confluence Server web server exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to write files to arbitrary locations and execute arbitrary code...

Opto 22 SoftPAC Project Data Forgery Issue Vulnerability

Opto 22 SoftPAC Project is an automation software suite from Opto 22 USA. The product is capable of providing industrial automation, process control, building automation, remote monitoring, data acquisition and industrial IoT. A data forgery issue vulnerability exists in Opto 22 SoftPAC Project...

CVE-2020-12042

Opto 22 SoftPAC Project Version 9.6 and prior. Paths specified within the zip files used to update the SoftPAC firmware are not sanitized. As a result, an attacker with user privileges can gain arbitrary file write access with system access...