CVE-2015-3202: Undefined Security Weakness

fusermount in FUSE before 2.9.3-15 does not properly clear the environment before invoking 1 mount or 2 umount as root, which allows local users to write to arbitrary files via a crafted LIBMOUNTMTAB environment variable that is used by mount's debugging feature...

CVE-2015-1942

The CVE-2015-1942 entry concerns IBM Tivoli Storage Manager FastBack Server. Multiple sources (IBM Security Bulletin, NVD/NIST, and Nessus/OpenVAS listings) confirm that FastBack Server versions up to 6.1.11.1 are affected when handling crafted TCP traffic. The root issue is a remote code executi...

CVE-2015-2966: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Droidware UK Explorer+ File Manager application before 2.3.3 for Android allows remote attackers to write to arbitrary files via unspecified vectors...

CVE-2015-5149: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Zoho ManageEngine SupportCenter Plus 7.90 allows remote authenticated users to write to arbitrary files via a .. dot dot in the component parameter in the Request component to workorder/Attachment.jsp...

CVE-2015-1942: Improper Input Validation

The server in IBM Tivoli Storage Manager FastBack 6.1 before 6.1.12 allows remote attackers to write to arbitrary files, and subsequently execute these files, via a crafted TCP packet to an unspecified port...

PT-2015-1399

Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions prior to 6.1.12 Description The issue allows remote attackers to write to and execute arbitrary files by sending crafted TCP packets to an unspecified port. This is due to insufficient input...

advisories

ZipFury: Yet another Zip arbitrary file write with system priv...

PT-2015-6649

Name of the Vulnerable Software and Affected Versions Samsung Galaxy S series affected versions not specified Description The issue allows remote web servers to write to arbitrary files and execute arbitrary code in a privileged context by leveraging control of the skslm.swiftkey.net domain name...

The vulnerability of the NetCharts Server data visualization platform allows a hacker to write arbitrary files.

The vulnerability in the saveFile.jsp file of the NetCharts Server deployment tool exists due to an incorrect restriction on the path name for the restricted access directory. Exploiting this vulnerability allows a malicious actor to write any files they desire...

CGI RESCUE BloBee Arbitrary Code Execution Vulnerability

CGI RESCUE BloBee is a bulletin release software. A security vulnerability exists in CGI RESCUE BloBee that can be exploited by remote attackers to write to arbitrary files and execute arbitrary code...

PT-2015-3248

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.42 PHP versions 5.5.x prior to 5.5.26 PHP versions 5.6.x prior to 5.6.10 Description The issue is related to the lack of checking for %00 sequences in path names, which can be exploited by a remote attacker to read or...

CVE-2015-4152: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option...

PT-2015-6010

Name of the Vulnerable Software and Affected Versions CGI RESCUE BloBee versions 1.20 and earlier Description The issue allows remote attackers to write to arbitrary files and consequently execute arbitrary code via unspecified vectors. Recommendations For versions 1.20 and earlier, at the moment...

CVE-2015-2962: Improper Input Validation

CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors...

Zarafa Collaboration Platform Local Arbitrary File Write Vulnerability

Zarafa Collaboration Platform is a suite of open source email and calendaring software. A security vulnerability in the provider/server/ECServer.cpp file of Zarafa Collaboration Platform allows a local attacker to write arbitrary files by performing a symbolic link attack on the...

PT-2020-7830 · Abrt +2 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue allows local users to potentially write to arbitrary files or have other unspecified impact via a symlink attack on certain directories. Recommendations: At the moment, there is no...

PT-2015-3191

Name of the Vulnerable Software and Affected Versions Zarafa Collaboration Platform versions prior to 7.1.13 Zarafa Collaboration Platform versions 7.2.x prior to 7.2.1 Description The issue is related to a file access control flaw in the provider/server/ECServer.cpp component. It allows local...

CVE-2015-3436: Improper Link Resolution Before File Access

provider/server/ECServer.cpp in Zarafa Collaboration Platform ZCP before 7.1.13 and 7.2.x before 7.2.1 allows local users to write to arbitrary files via a symlink attack on /tmp/zarafa-upgrade-lock...

CVE-2015-2993: Undefined Security Weakness

SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to 1 create administrator accounts via a crafted request to /createnewaccount or 2 write to arbitrary files via the fileName parameter to /userentry...

Visual Mining NetChart Directory Traversal Vulnerability

Visual Mining NetChart is a suite of data visualization tools from Visual Mining USA. The tool supports the generation of data in the form of charts, graphs, and reports. A directory traversal vulnerability exists in the saveFile.jsp file in the development installer of Visual Mining NetChart. A...