Lucene search
+L

10256 matches found

OSV
OSV
•added 2021/04/21 10:15 p.m.•17 views

ALPINE-CVE-2020-27569

Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system...

7.5CVSS7.1AI score0.009EPSS
SaveExploits0References1
OSV
OSV
•added 2021/04/21 10:15 p.m.•32 views

CVE-2020-27569

Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system...

7.5CVSS7AI score
SaveExploits0References1
Prion
Prion
•added 2021/04/21 10:15 p.m.•31 views

Design/Logic Flaw

Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system...

5CVSS7.6AI score0.009EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2021/04/21 9:23 p.m.•43 views

CVE-2020-27569

Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system...

7.8AI score0.009EPSS
SaveExploits0References1
AlpineLinux
AlpineLinux
•added 2021/04/21 9:23 p.m.•140 views

CVE-2020-27569

Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system...

7.5CVSS7.9AI score0.009EPSS
SaveExploits0
CVE
CVE
•added 2021/04/21 9:23 p.m.•109 views

CVE-2020-27569

The CVE-2020-27569 entry concerns Aviatrix VPN Client 2.8.2 and earlier, where the VPN service writes logs to a world-writable location, enabling arbitrary file write with potential to modify any file on the system. The connected OSV entries corroborate the same description; no exploitation detai...

7.5CVSS7.7AI score0.009EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2021/04/21 12:00 a.m.•3 views

PT-2021-11407

Name of the Vulnerable Software and Affected Versions: Aviatrix VPN Client versions 2.8.2 and earlier Description: The issue allows for Arbitrary File Write, where the VPN service writes logs to a world-writable location. This can be exploited to gain write access to any file on the system...

7.5CVSS0.009EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/21 12:00 a.m.•4 views

CVE-2020-27569: Incorrect Default Permissions

Arbitrary File Write exists in Aviatrix VPN Client 2.8.2 and earlier. The VPN service writes logs to a location that is world writable and can be leveraged to gain write access to any file on the system...

7.5CVSS5.8AI score0.009EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/20 12:00 a.m.•6 views

CVE-2021-29461: Improper Control of Generation of Code

Discord Recon Server is a bot that allows one to do one's reconnaissance process from one's Discord. A vulnerability in Discord Recon Server prior to 0.0.3 could be exploited to read internal files from the system and write files into the system resulting in remote code execution. This issue has...

9CVSS6.2AI score0.02476EPSS
SaveExploits0References3
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•50 views

SUSE: Security Advisory (SUSE-SU-2017:1450-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS7.1AI score0.08003EPSS
SaveExploits10References7
OpenVAS
OpenVAS
•added 2021/04/19 12:00 a.m.•27 views

SUSE: Security Advisory (SUSE-SU-2017:1446-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

6.9CVSS7.1AI score0.08003EPSS
SaveExploits10References7
Vulnrichment
Vulnrichment
•added 2021/04/15 1:51 p.m.•10 views

CVE-2021-21100 Adobe Digital Editions Arbitrary file system write vulnerability

Adobe Digital Editions version 4.5.11.187245 and earlier is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to achieve arbitrary file system write in the context of the current user. Exploitation of this issue...

7.8CVSS7.4AI score0.01721EPSS
SaveExploits0References1
CNVD
CNVD
•added 2021/04/15 12:00 a.m.•21 views

MDaemon Webmail Arbitrary File Write Vulnerability

MDaemon Webmail is a server-side application for providing mail services from MDaemon, Inc. in the United States. An arbitrary file write vulnerability exists in MDaemon Webmail versions prior to 20.0.4, which can be exploited by an attacker to create a new file anywhere on the file system, or ca...

7.2CVSS7.7AI score0.02695EPSS
SaveExploits1References1
Zero Day Initiative
Zero Day Initiative
•added 2021/04/15 12:00 a.m.•66 views

Microsoft Windows Installer Service Untrusted File Path Arbitrary File Write Vulnerability

This vulnerability allows local attackers to write data to arbitrary files on affected installations of Microsoft Windows. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

7.3CVSS5.1AI score0.03569EPSS
SaveExploits1References1
OSV
OSV
•added 2021/04/14 11:15 p.m.•13 views

CVE-2021-27183

An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly...

7.2CVSS5.8AI score0.02695EPSS
SaveExploits1References2
NVD
NVD
•added 2021/04/14 11:15 p.m.•22 views

CVE-2021-27183

An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly...

7.2CVSS0.02695EPSS
SaveExploits1References2
Prion
Prion
•added 2021/04/14 11:15 p.m.•29 views

Remote code execution

An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly...

6.5CVSS7AI score0.02695EPSS
SaveExploits1References2Affected Software1
attackerkb
attackerkb
•added 2021/04/14 11:15 p.m.•9 views

CVE-2021-27183

An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly...

7.2CVSS7.2AI score0.02695EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2021/04/14 10:32 p.m.•35 views

CVE-2021-27183

An issue was discovered in MDaemon before 20.0.4. Administrators can use Remote Administration to exploit an Arbitrary File Write vulnerability. An attacker is able to create new files in any location of the filesystem, or he may be able to modify existing files. This vulnerability may directly...

7.3AI score0.02695EPSS
SaveExploits1References2
CVE
CVE
•added 2021/04/14 10:32 p.m.•135 views

CVE-2021-27183

MDaemon Webmail before 20.0.4 contains an Arbitrary File Write vulnerability exploitable via Remote Administration. An attacker can create new files anywhere on the filesystem or modify existing files, with potential to achieve Remote Code Execution. Technical details across CNVD/CNNVD entries co...

7.2CVSS7AI score0.02695EPSS
SaveExploits1References2Affected Software1
Rows per page
Query Builder