Beijing Jiezhong Industrial Control Software FameView Arbitrary File Read/Write Vulnerability

FameView automation configuration management software is a configuration monitoring software developed by Beijing Jiezhong Company based on Windows operating system with years of experience in engineering application and service. Beijing Jiezhong industrial control configuration software FameView...

CVE-2016-6140: Improper Access Control

SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591...

CVE-2016-5253: Undefined Security Weakness

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

PT-2016-6767

Name of the Vulnerable Software and Affected Versions SAP TREX version 7.10 Revision 63 Description The issue allows remote attackers to write to arbitrary files. This is related to vectors involving the RFC-Gateway. Recommendations For SAP TREX version 7.10 Revision 63, apply the fix provided in...

CVE-2016-6232: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

PT-2016-4888

Name of the Vulnerable Software and Affected Versions Novell Filr versions prior to 1.2 Security Update 3 Novell Filr versions 2.0 prior to Security Update 2 Description The issue allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. dot dot in a blo...

CVE-2016-1610: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. dot dot in a blob name...

CVE-2016-3992

CVE-2016-3992 affects cronic prior to version 3, enabling local users to write arbitrary files via a symlink attack against cronic.out.$$, cronic.err.$$, or cronic.trace.$$ in /tmp. Root cause: symlink manipulation in temporary files. Practical impact: local privilege or data tampering risk with ...

CVE-2016-3992: Improper Access Control

cronic before 3 allows local users to write to arbitrary files via a symlink attack on a 1 cronic.out.$$, 2 cronic.err.$$, or 3 cronic.trace.$$ file in /tmp...

PT-2016-5799

Name of the Vulnerable Software and Affected Versions cronic versions prior to 3 Description The issue allows local users to write to arbitrary files via a symlink attack on a 1 cronic.out.$$, 2 cronic.err.$$, or 3 cronic.trace.$$ file in /tmp. Recommendations For versions prior to 3, update to...

PT-2017-8945

Name of the Vulnerable Software and Affected Versions Portable UPnP SDK aka libupnp versions prior to 1.6.21 Description The issue allows remote attackers to write to arbitrary files in the webroot via a POST request without a registered handler. This can be achieved by sending a POST request to ...

Arbitrary File Write Vulnerability on Server Side of NJ MAGAPP Products

MAGAPP is a forum mobile client management system developed for local urban communities, including iOS, Android cell phone, PC management system, independent Discuz and multi-platform sharing components, able to dock the urban community website database and run independently on the local...

PT-2016-6805

Name of the Vulnerable Software and Affected Versions KArchive versions prior to 5.24 Description A directory traversal issue allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file. This is related to KNewsstuff downloads. Recommendations For...

UBUNTU-CVE-2016-6232

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

The vulnerability of the Security SiteProtector System, a website security protection system, allows a hacker to write arbitrary files.

The vulnerability of the Security SiteProtector System’s security protection mechanism exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to remotely write arbitrary files...

CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

CVE-2016-4971: Undefined Security Weakness

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...

PT-2016-6415

Name of the Vulnerable Software and Affected Versions libarchive versions 3.2.0 and earlier Description The issue is related to the sandboxing code in libarchive, which incorrectly handles hardlink archive entries with non-zero data size. This could potentially allow remote attackers to write to...

CVE-2016-1435

Cisco 8800 phones with software 11.01 do not properly enforce mounted-filesystem permissions, which allows local users to write to arbitrary files by leveraging shell access, aka Bug ID CSCuz03014...

UBUNTU-CVE-2016-4971

GNU wget before 1.18 allows remote servers to write to arbitrary files by redirecting a request from HTTP to a crafted FTP resource...