CVE-2018-20687

An XML external entity XXE vulnerability in CommandCenterWebServices/.?wsdl in Raritan CommandCenter Secure Gateway before 8.0.0 allows remote unauthenticated users to read arbitrary files or conduct server-side request forgery SSRF attacks via a crafted DTD in an XML request...

File Upload Vulnerability in Super CMS Backend

Super CMS Content Management System is a set of products developed to solve the problem of website optimization, it is an open source content management system, the product is based on PHP + MYSQL architecture, and it can run on various platforms such as Windows, Linux, MacOSX, Solaris and so on...

USN-4193-1: Ghostscript vulnerability

Paul Manfred and Lukas Schauer discovered that Ghostscript incorrectly handled certain PostScript files. If a user or automated system were tricked into processing a specially crafted file, a remote attacker could possibly use this issue to access arbitrary files, execute arbitrary code, or cause...

CVE-2019-18951

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files...

Directory traversal

SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files...

CVE-2010-4817

pithos before 0.3.5 allows overwrite of arbitrary files via symlinks...

CVE-2010-4817

CVE-2010-4817 affects pithos prior to 0.3.5, where a symlink vulnerability allows overwrite of arbitrary files. The issue is documented across multiple feeds (Red Hat, Ubuntu, Debian OSV, NVD/NVD-derived entries) with the core impact: local file overwrite via symlinks. The connected records confi...

Code injection

views/upload.php in the ProJoom Smart Flash Header NovaSFH component 3.0.2 and earlier for Joomla! allows remote attackers to upload and execute arbitrary files via a crafted 1 dest parameter and 2 arbitrary extension in the Filename parameter...

TYPO3 File Deletion Vulnerability

TYPO3 is a free and open source content management system framework CMS/CMF of the Swiss TYPO3 Association. A full vulnerability exists in TYPO3 versions prior to 4.3.12, 4.4.9 and 4.5.x prior to 4.5.4. An attacker can exploit this vulnerability to delete arbitrary files on the web server...

CVE-2010-3440

babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files...

CVE-2010-3440

babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files...

CVE-2010-3440

babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local attacker to overwrite arbitrary files...

EulerOS 2.0 SP8 : openssh (EulerOS-SA-2019-2113)

According to the versions of the openssh packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An issue was discovered in OpenSSH 7.9. Due to missing character encoding in the progress display, a malicious server or Man-in-The-Middle...

Liboping Input Validation Error Vulnerability

liboping is an open source Ping library and command line utility. An input validation error vulnerability exists in liboping version 1.3.2, which can be exploited by an attacker to read arbitrary files on the local system...

CVE-2018-12015

It was found that the Archive::Tar module did not properly sanitize symbolic links when extracting tar archives. An attacker, able to provide a specially crafted archive for processing, could use this flaw to write or overwrite arbitrary files in the context of the Perl interpreter...

File Deletion Vulnerability in Panavision OA Collaboration Office System

Panmicro oa office system is a business office software. A file deletion vulnerability exists in Panmicro OA Collaboration Office System, which can be exploited by an attacker to delete arbitrary files...

Information disclosure

liboping 1.3.2 allows users reading arbitrary files upon the local system...

CVE-2009-0035

alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts...

EulerOS 2.0 SP5 : tar (EulerOS-SA-2019-2192)

According to the version of the tar package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended...

Arbitrary File Read Vulnerability in gxlcms Software System

The gxlcms software system is a simple program tailored to the user. An arbitrary file read vulnerability exists in the gxlcms software system. An attacker can exploit this vulnerability to read arbitrary files...