2726 matches found
CVE-2020-3440 Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...
CVE-2020-3440 Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...
CVE-2020-5912
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files...
CVE-2020-3440: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...
CVE-2020-5912: Undefined Security Weakness
In BIG-IP versions 15.1.0-15.1.0.4, 15.0.0-15.0.1.3, 14.1.0-14.1.2.3, 13.1.0-13.1.3.3, 12.1.0-12.1.5.1, and 11.6.1-11.6.5.1, the restjavad process's dump command does not follow current best coding practices and may overwrite arbitrary files...
CVE-2020-3519: Improper Input Validation
A vulnerability in a specific REST API method of Cisco Data Center Network Manager DCNM Software could allow an authenticated, remote attacker to conduct a path traversal attack on an affected device. The vulnerability is due to insufficient validation of user-supplied input to the API. An attack...
Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite (cisco-sa-webex-desktop-app-OVSfpVMj)
According to its self-reported version, Cisco Webex Meetings Desktop App for Windows is affected by a vulnerability due to improper validation of URL parameters that are sent from a website to the affected application. An unauthenticated, remote attacker can exploit this, by persuading a user to...
Cisco Webex Meetings Desktop App Path Traversal Vulnerability
Cisco Webex Meetings Desktop App and Cisco Webex Meetings are both products of Cisco, Inc.Cisco Webex Meetings Desktop App is a video conferencing control application for use in a desktop environment.Cisco Webex Meetings is a video conferencing solution. A path traversal vulnerability exists in...
Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability
A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...
PT-2020-3769
Name of the Vulnerable Software and Affected Versions: Cisco Webex Meetings Desktop App for Windows affected versions not specified Description: The issue is related to improper validation of URL parameters sent from a website to the application, allowing an unauthenticated, remote attacker to...
IBM QRadar Improper Access Control Vulnerability
IBM QRadar is an enterprise security information and event management SIEM product that detects anomalies, finds advanced threats, and eliminates false positives. A security vulnerability exists in IBM QRadar Wincollect versions 7.2.0 through 7.2.9 that stems from WinCollect failing to install...
CVE-2020-4486
IBM QRadar 7.2.0 thorugh 7.2.9 could allow an authenticated user to overwrite or delete arbitrary files due to a flaw after WinCollect installation. IBM X-Force ID: 181861...
Firejail OS Command Injection Vulnerability (CNVD-2020-46817)
Firejail is a SUID sandboxing program written in C. A security vulnerability exists in Firejail 0.9.62 and earlier versions. The vulnerability can be exploited to overwrite arbitrary files with the help of the '--' delimiter...
PT-2020-3586
Name of the Vulnerable Software and Affected Versions libvirt versions 20.04 LTS Description The issue is related to incorrect permissions for a critical resource in the libvirt virtualization management library. An attacker could exploit this to overwrite arbitrary files or execute arbitrary cod...
PT-2020-3924
Name of the Vulnerable Software and Affected Versions: CAMS for HIS CENTUM CS 3000 versions R3.08.10 through R3.09.50 CAMS for HIS CENTUM VP versions R4.01.00 through R6.07.00 CAMS for HIS B/M9000CS versions R5.04.01 through R5.05.01 CAMS for HIS B/M9000 VP versions R6.01.01 through R8.03.01...
CVE-2020-15593
SteelCentral Aternity Agent 11.0.0.120 on Windows mishandles IPC. It uses an executable running as a high privileged Windows service to perform administrative tasks and collect data from other processes. It distributes functionality among different processes and uses IPC Inter-Process Communicati...
Cisco Firepower Device Manager On-Box Software Arbitrary File Overwrite (cisco-sa-fdmfo-HvPWKxDe)
According to its self-reported version, Cisco Firepower Device Manager FDM On-Box software is affected by an arbitrary file overwrite vulnerability due to improper input validation. An authenticated, remote attacker can exploit this by uploading a malicious file to an affected device in order to...
CVE-2020-5370
Dell EMC OpenManage Enterprise OME versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high privileges could potentially exploit this vulnerability to overwrite arbitrary files via directory traversal sequences using a crafted tar fi...
CVE-2019-3681: External Control of File Name or Path
A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that c...
