443 matches found
PT-2021-3127
Name of the Vulnerable Software and Affected Versions Exim versions prior to 4.94.2 Description The issue is related to errors in privilege management. It allows an attacker to delete arbitrary files in the system by leveraging a delete pid file race condition. This can be done using the -oP and...
CVE-2021-31421
This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...
CVE-2021-20714
Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors...
CVE-2021-20714
Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary files on the server via unspecified vectors...
PT-2021-14173
Name of the Vulnerable Software and Affected Versions: WP Fastest Cache versions prior to 0.9.1.7 Description: A directory traversal issue allows a remote attacker with administrator privileges to delete arbitrary files on the server. Recommendations: For WP Fastest Cache versions prior to 0.9.1....
CVE-2020-17564
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component...
Path traversal
Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" component...
FeiFeiCms 路径遍历漏洞
FeiFeiCMS is an open source PHP video on demand system . FeiFeiCMS version 4.0 there is a path traversal vulnerability , an attacker can send a specially crafted HTTP request to /index.php?s=/admin-tpl-del&id= to exploit the vulnerability to delete arbitrary files...
PT-2021-10106
Name of the Vulnerable Software and Affected Versions: FeiFeiCMS version 4.0 Description: The issue allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the "/index.php?s=/admin-tpl-del&id=" API endpoint. The id variable is used in this process. Recommendations:...
PT-2021-2526
Name of the Vulnerable Software and Affected Versions: Kaspersky Anti-Virus affected versions not specified Kaspersky Internet Security affected versions not specified Kaspersky Total Security affected versions not specified Kaspersky Small Office Security affected versions not specified Kaspersk...
Logic flaw vulnerability in Jinwei Mobile Mall (CNVD-2021-24814)
Jinwei Mobile Mall System is a mall management system for micro-business customers with public numbers. A logic flaw vulnerability exists in Jinwei Mobile Mall, which can be exploited by an attacker to delete arbitrary files...
CVE-2020-29555
The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by exploiting a path-traversal technique. This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection...
PT-2021-11692
Name of the Vulnerable Software and Affected Versions: Grav CMS versions 1.7.0-rc.17 and earlier Description: The issue allows an authenticated attacker to delete arbitrary files on the server using a path-traversal technique. Additionally, an unauthenticated attacker can exploit this due to a la...
PT-2021-14121
Name of the Vulnerable Software and Affected Versions: SolarView Compact SV-CPT-MC310 versions prior to Ver.6.5 Description: The issue allows authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors. This is a directory traversal vulnerability...
PT-2021-12475
Name of the Vulnerable Software and Affected Versions: Marvell QConvergeConsole GUI versions 5.5.0.74 and earlier Description: The issue concerns a path traversal vulnerability. Specifically, the deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied...
PT-2020-18723
Name of the Vulnerable Software and Affected Versions Marvell QConvergeConsole GUI version 5.5.0.74 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk with elevated privileges, either as SYSTEM or root, due to a Relative Path Traversal vulnerability in...
CVE-2020-24433
Adobe Acrobat Reader DC versions 2020.012.20048 and earlier, 2020.001.30005 and earlier and 2017.011.30175 and earlier are affected by a local privilege escalation vulnerability that could enable a user without administrator privileges to delete arbitrary files and potentially execute arbitrary...
PT-2020-18897
Name of the Vulnerable Software and Affected Versions Check Point ZoneAlarm versions prior to 15.8.139.18543 Description The issue allows a local actor to delete arbitrary files while restoring files in Anti-Ransomware. Recommendations For versions prior to 15.8.139.18543, update to version...