PT-2015-5153

Name of the Vulnerable Software and Affected Versions pigz version 2.3.1 Description The issue allows remote attackers to write to arbitrary files via a full pathname or .. dot dot in an archive, potentially leading to unauthorized file access or modification. Recommendations For pigz version...

CVE-2015-1038: Improper Link Resolution Before File Access

p7zip 9.20.1 allows remote attackers to write to arbitrary files via a symlink attack in an archive...

PT-2015-5029

Name of the Vulnerable Software and Affected Versions p7zip version 9.20.1 Description The issue allows remote attackers to write to arbitrary files via a symlink attack in an archive. Recommendations For p7zip version 9.20.1, at the moment, there is no information about a newer version that...

UBUNTU-CVE-2015-1196

GNU patch 2.7.1 allows remote attackers to write to arbitrary files via a symlink attack in a patch file...

PT-2015-5251

Name of the Vulnerable Software and Affected Versions Pixabay Images plugin versions prior to 2.4 Description The issue concerns the Pixabay Images plugin for WordPress, where the pixabay-images.php file does not validate hostnames. This allows remote authenticated users to write to arbitrary fil...

DEBIAN-CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

CVE-2015-0552: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

PT-2015-3621

Name of the Vulnerable Software and Affected Versions SolidWorks Workgroup PDM version 2014 Description The issue allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload, potentially leading to unauthorized file modifications. Recommendations For...

CVE-2014-100015: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in pdmwService.exe in SolidWorks Workgroup PDM 2014 allows remote attackers to write to arbitrary files via a .. dot dot in the filename in a file upload...

PT-2015-4712

Name of the Vulnerable Software and Affected Versions gcab version 0.4 Description A directory traversal issue exists in the gcab folder extract function, allowing remote attackers to write to arbitrary files via a crafted path in a CAB file. This can be achieved by using a specially crafted path...

Kofax e-Transactions Sender Sendbox File Injection Vulnerability

Kofax e-Transactions Sender Sendbox is an add-on application to a suite of Kofax conversion modules from Kofax USA that automates the electronic transfer of documents to business processes via secure e-mail. A file injection vulnerability exists in Kofax e-Transactions Sender Sendbox, which allow...

CVE-2014-9389: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Sonatype Nexus OSS and Pro before 2.11.1-01 allows remote attackers to read or write to arbitrary files via unspecified vectors...

CVE-2014-9447

Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...

CVE-2014-9447: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the readlongnames function in libelf/elfbegin.c in elfutils 0.152 and 0.161 allows remote attackers to write to arbitrary files to the root directory via a / slash in a crafted archive, as demonstrated using the ar program...

CVE-2011-5291

The CVE-2011-5291 entry concerns Ashampoo 3D CAD Professional (3.x) before 3.0.2, where the SaveData method of the Cygnicon.ViewControl.1 ActiveX control in CyViewer.ocx allows a remote attacker to write arbitrary files by supplying a pathname as the first argument. The vulnerability is rooted in...

PT-2015-3486

Name of the Vulnerable Software and Affected Versions IDrive Online Backup version 3.4.0 Description The issue concerns the SaveToFile method in the UniBasicPack.UniTextBox ActiveX control, which allows remote attackers to write to arbitrary files by specifying a pathname in the first argument...

PT-2015-3489

Name of the Vulnerable Software and Affected Versions ThreeDify Designer version 5.0.2 Description The issue concerns the cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control, which is part of the ActiveSolid.dll in ThreeDify Designer. This method allows remote attackers to write t...

CVE-2011-5293: Improper Restriction of Operations within the Bounds of a Memory Buffer

The cmdSave method in the ThreeDify.ThreeDifyDesigner.1 ActiveX control in ActiveSolid.dll in ThreeDify Designer 5.0.2 allows remote attackers to write to arbitrary files via a pathname in the argument...

PT-2015-3490

Name of the Vulnerable Software and Affected Versions Kofax e-Transactions Sender Sendbox version 2.5.0.933 Description The issue allows remote attackers to write to arbitrary files via a pathname in the first argument of the SaveMessage method in the LEADeMail.LEADSmtp.20 ActiveX control...