PT-2016-6349

Name of the Vulnerable Software and Affected Versions Firefox ESR versions prior to 45.5 Firefox versions prior to 50 Description The issue allows data to be appended to an arbitrary local file when the Mozilla Updater's log file points to a hardlink, requiring local system access. This issue onl...

The vulnerability of the Linux operating system, which allows a hacker to overwrite arbitrary files

The vulnerability of the EXT4IOCMOVEEXT ioctl implementation in the Linux file system is related to deficiencies in access control. Exploiting this vulnerability allows a local attacker to re-write arbitrary files using a specially created request that relies on insufficient access rights checkin...

DEBIAN-CVE-2016-5537

Unspecified vulnerability in the NetBeans component in Oracle Fusion Middleware 8.1 allows local users to affect confidentiality, integrity, and availability via unknown vectors. NOTE: the previous information is from the October 2016 CPU. Oracle has not commented on third-party claims that this...

Microsoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation (MS16-124)

Microsoft Windows - NtLoadKeyEx Read Only Hive Arbitrary File Write Privilege Escalation MS16-124 / Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=871 Windows: NtLoadKeyEx Read Only Hive Arbitrary File Write EoP Platform: Windows 10 10586 not tested 8.1 Update 2 or Windows 7...

CVE-2016-7560: Use of Hard-coded Credentials

The rsyncd server in Fortinet FortiWLC 6.1-2-29 and earlier, 7.0-9-1, 7.0-10-0, 8.0-5-0, 8.1-2-0, and 8.2-4-0 has a hardcoded rsync account, which allows remote attackers to read or write to arbitrary files via unspecified vectors...

PT-2016-7386

Name of the Vulnerable Software and Affected Versions FortiWLC versions 6.1-2-29 and earlier FortiWLC version 7.0-9-1 FortiWLC version 7.0-10-0 FortiWLC version 8.0-5-0 FortiWLC version 8.1-2-0 FortiWLC version 8.2-4-0 Description The issue concerns a hardcoded rsync account in the rsyncd server,...

CVE-2016-4386: Undefined Security Weakness

HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors...

PT-2016-5931

Name of the Vulnerable Software and Affected Versions HPE Network Automation Software version 10.10 Description The issue allows local users to write to arbitrary files. Recommendations For HPE Network Automation Software version 10.10, at the moment, there is no information about a newer version...

Arbitrary File Write Vulnerability in Eurohoo Government System of Shanghai Eurohoo Network Technology Co.

Shanghai Ohuhu Network Technology Co., Ltd. is a service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. There is an arbitrary file write vulnerability in Shanghai Ohuhu Network Technology Co. The vulnerability allows an...

CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

PT-2017-4046

Name of the Vulnerable Software and Affected Versions JCraft JSch versions prior to 0.1.54 Description The issue allows remote SFTP servers to write to arbitrary files via a .. dot dot backslash in a response to a recursive GET command, potentially impacting the integrity of information. This is...

CVE-2016-5418: Improper Input Validation

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

Cisco Fog Director for IOx Arbitrary File Write Vulnerability

Cisco Fog Director for IOx is an automated management platform for centralized management of multiple applications running at the network edge based on IOx an end-to-end application support system that provides application hosting capabilities from Cisco. The platform controls application setting...

CVE-2016-6405: Improper Input Validation

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

PT-2016-6879

Name of the Vulnerable Software and Affected Versions Cisco Fog Director version 1.00 for IOx Description The issue allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface. Recommendations For Cisco Fog Director version 1.0...

Cisco Patches Critical WebEx Meetings Server Vulnerability

Cisco warned customers of 12 vulnerabilities across its product line this week, including a critical vulnerability in the software that powers its conferencing product, WebEx Meetings Server. The company stressed on Wednesday that version 2.6 of its WebEx Meetings Server is vulnerable to a remote...

CVE-2016-6371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717...

Arbitrary File Write Vulnerability in Multiple Series of D-Link '/improtexport.php' Products

D-Link DAR-8000-X series and DAR-7000-x series Internet Behavior Audit Gateways provide complete Internet access behavior management solutions to protect the operational efficiency and information security of enterprises. An arbitrary file write vulnerability exists in several D-Link series...

Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal Vulnerability (CNVD-2016-07110)

Cisco Hosted Collaboration Solution HCS is a cloud service that provides communication and collaboration solutions. A security vulnerability exists in the web interface of Cisco Hosted Collaboration Mediation Fulfillment. Due to the program not properly validating the HTTP URL format. An...

Portable SDK for UPnP Devices (libupnp) HTTP Arbitrary File Write

The Portable SDK for UPnP Devices libupnp running on the remote host is affected by a flaw that is triggered when handling HTTP POST or GET requests. An unauthenticated, remote attacker can exploit this to write arbitrary files to the web server file system. C Tenable Network Security, Inc...