267 matches found
Directory traversal
A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...
CVE-2018-7102
A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...
CVE-2018-7102
A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...
CVE-2018-7109
HPE eIUM (enhanced Internet Usage Manager), a real-time billing platform, is affected by CVE-2018-7109. The vulnerability is described as a remote arbitrary file modification vulnerability in eIUM v9.0FP1 (and related 9.0 FP01-based builds). The root cause details are not fully disclosed in the p...
PT-2018-17911
Name of the Vulnerable Software and Affected Versions HPE enhanced Internet Usage Manager eIUM version 9.0FP1 Description A remote arbitrary file modification issue has been identified. HPE has addressed this issue with a cumulative patch for version 9.0FP1. Recommendations For HPE enhanced...
CVE-2018-7109: Undefined Security Weakness
HPE has addressed a remote arbitrary file modification vulnerability in HPE enhanced Internet Usage Manager eIUM v9.0FP1 with the cumulative patch for v9.0FP1 - eIUM90FP01XXX.YYYYMMDD-HHMM...
CVE-2018-7102: Improper Limitation of a Pathname to a Restricted Directory
A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...
[SECURITY] [DSA 4285-1] sympa security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4285-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 05, 2018 https://www.debian.org/security/faq -...
PT-2018-17907
Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC version PLAT E0506P09 Description A security issue in HPE Intelligent Management Center iMC allows remote arbitrary file modification via directory traversal. This can be exploited remotely. The...
CVE-2018-7073
A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...
Design/Logic Flaw
A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...
CVE-2018-7073: Exposure of Resource to Wrong Sphere
A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...
PT-2018-17888
Name of the Vulnerable Software and Affected Versions HPE Moonshot Provisioning Manager versions prior to 1.24 Description A local arbitrary file modification issue was identified. Recommendations For versions prior to 1.24, update to version 1.24 or later to resolve the issue...
CVE-2017-6690: Improper Input Validation
A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected...
Unauthorized Modification of Arbitrary Files Vulnerability in 'DataBaseBackup_Edit.aspx' of MicroXia E-learning Platform
Micro Xia Online Learning Platform is an online education system based on B/S architecture. An unauthorized modification of arbitrary files vulnerability exists in 'DataBaseBackupEdit.aspx' of the Weixia Online Learning Platform. An attacker using this vulnerability to modify the db.config file i...
CVE-2015-8258: Improper Neutralization of Special Elements in Output Used by a Downstream Component
AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability."...
Cisco Iox Arbitrary File Modification Vulnerability
Cisco IOx is a suite of applications from Cisco USA that provide unified hosting capabilities for Cisco's IoT network infrastructure. A security vulnerability in the web framework code in the CAF component of Cisco IOx can be exploited by remote attackers to upload malicious data messages to writ...
PT-2017-16146
Name of the Vulnerable Software and Affected Versions Cisco IOx versions 1.0.0.0 through 1.1.0.0 Description A vulnerability in the Cisco application-hosting framework component could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the...
