PT-2020-4419

Name of the Vulnerable Software and Affected Versions: TIBCO Managed File Transfer Platform Server for IBM i versions 7.1.0 and below TIBCO Managed File Transfer Platform Server for IBM i version 8.0.0 Description: The issue is related to errors in the authentication request handling mechanism of...

CVE-2020-3238

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient input...

Arbitrary File Modification Vulnerability in WMCMS

WMCMS is based on PHP + MYSQL as the core development, free + open source professional Chinese labeling system. WMCMS arbitrary file modification vulnerability, an attacker can use the vulnerability to modify any file...

Hubei Tao code thousand dimensional information technology limited company gold micro cell phone mall system exists arbitrary file modification vulnerability

Jinwei mobile mall system is suitable for micro-business customers with public number, imitating the page layout of the hand Tao, support embedded video playback. Support customized model specifications, the main specifications support attached pictures, each subdivided model support inventory...

CVE-2012-3808

Samsung Kies before 2.5.0.120942711 has arbitrary file modification...

Design/Logic Flaw

Samsung Kies before 2.5.0.120942711 has arbitrary file modification...

CVE-2012-3808

Samsung Kies before 2.5.0.120942711 has arbitrary file modification...

CVE-2012-3808

CVE-2012-3808 concerns Samsung Kies. The connected docs confirm a vulnerability class of Arbitrary File Modification in Kies versions prior to 2.5.0.12094_27_11, caused by insecure operations in the CmdAgentLib/CmdAgent dlls (ICommandAgent interface) used by Kies’ firmware update component. The a...

PT-2020-7222

Name of the Vulnerable Software and Affected Versions Samsung Kies versions prior to 2.5.0.12094 27 11 Description The issue allows for arbitrary file modification. Recommendations For versions prior to 2.5.0.12094 27 11, update to version 2.5.0.12094 27 11 or later to resolve the issue...

CVE-2012-3808: Undefined Security Weakness

Samsung Kies before 2.5.0.120942711 has arbitrary file modification...

Windows iphlpsvc DLL Privilege Escalation File Modification

The vulnerability of the iphlpsvc.dll library in the Windows operating system is related to errors during file creation. Exploiting this vulnerability can allow attackers to enhance their privileges and modify arbitrary files using a specially created application...

PT-2019-4024

Name of the Vulnerable Software and Affected Versions Microsoft Visual Studio affected versions not specified Description The issue is related to errors in hardlink checking when extracting archived files, which can be exploited by a remote attacker to modify arbitrary files. This can be achieved...

PT-2019-13666

Name of the Vulnerable Software and Affected Versions cPanel versions prior to 80.0.5 Description The issue allows demo accounts to modify arbitrary files through the extractfile API call. Recommendations For versions prior to 80.0.5, update to version 80.0.5 or later to resolve the issue...

CVE-2019-14397: Undefined Security Weakness

cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call SEC-496...

libvirtd Heap Buffer Overflow DoS

The vulnerability of the virDomainManagedSaveDefineXML function in the libvirtd library is related to access control deficiencies. Exploiting this vulnerability could allow an attacker to modify arbitrary files by sending a specially crafted request...

F5 BIG-IP Permission License and Access Control Issues Vulnerability (CNVD-2019-32034)

F5 BIG-IP is an application delivery platform from F5 USA that integrates network traffic management, application security management, load balancing and other functions. A vulnerability exists in F5 BIG-IP with privilege permission and access control issues. An attacker can exploit this...

PT-2019-2711

Name of the Vulnerable Software and Affected Versions Visual Studio affected versions not specified Description The issue is related to an elevation of privilege vulnerability in the Visual Studio updater service, which improperly handles file permissions. This could allow an attacker to modify...

CVE-2019-9489: Improper Limitation of a Pathname to a Restricted Directory

A directory traversal vulnerability in Trend Micro Apex One, OfficeScan versions XG and 11.0, and Worry-Free Business Security versions 10.0, 9.5 and 9.0 could allow an attacker to modify arbitrary files on the affected product's management console...

CVE-2019-3827: Incorrect Authorization

An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running unde...

HPE enhanced Internet Usage Manager Arbitrary File Modification Vulnerability

HPE enhanced Internet Usage Manager eIUM is a real-time billing platform from Hewlett Packard Enterprise HPE, USA. The platform provides features such as charge control and session management. An arbitrary file modification vulnerability exists in HPE eIUM version 9.0FP1 including other user...