16896 matches found
CVE-2014-9014
Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. dot dot in the file parameter...
Directory traversal
Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. dot dot in the file parameter...
CVE-2014-9014
Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. dot dot in the file parameter...
CVE-2019-5418
A content disclosure flaw was found in rubygem-actionview. Specially crafted accept headers, in combination with calls to 'render file:', can cause arbitrary files on the target server to be rendered, disclosing the file contents. Code execution cannot be ruled out if the attacker is able to gain...
GNU cpio -- multiple vulnerabilities
Sergey Poznyakoff reports: This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2016-2037: The cpiosafernamesuffix function i...
Debian DLA-1981-1 : cpio security update
A vulnerability was discovered in the cpio package. CVE-2019-14866 It is possible for an attacker to create a file so when backed up with cpio can generate arbitrary files in the resulting tar archive. When the backup is restored the file is then created with arbitrary permissions. For Debian 8...
CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files...
DEBIAN-CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files...
Sql injection
minidlna has SQL Injection that may allow retrieval of arbitrary files...
CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files...
CVE-2013-2738
CVEs overview : The affected software is MiniDLNA (minidlna). The entry CVE-2013-2738 describes a SQL Injection vulnerability that may allow retrieval of arbitrary files. Multiple connected records corroborate that this issue targets MiniDLNA and can lead to file disclosure (CVE-2013-2738, with r...
CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files...
CVE-2010-2548
IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files...
CVE-2010-2783
IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services...
Code injection
IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files...
Code injection
IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services...
CVE-2010-2783
IcedTea6 before 1.7.4 allow unsigned apps to read and write arbitrary files, related to Extended JNLP Services...
rpcbind backlink vulnerability
rpcbind is a server that translates RPC program numbers into generic addresses for use on Linux systems. A backlink vulnerability exists in rpcbind version 0.2.0, which can be exploited by a local attacker to perform a write operation or gain privileges to an arbitrary file...
Zucchetti InfoBusiness Cross-Site Request Forgery Vulnerability
Zucchetti InfoBusiness is a business intelligence solution that uses multiple data to generate reports to measure company trends. A cross-site request forgery vulnerability exists in Zucchetti InfoBusiness 4.4.1 and earlier versions. An attacker can exploit this vulnerability to upload arbitrary...