443 matches found
CVE-2020-18191
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...
Directory traversal
Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture...
CVE-2020-18191
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...
CVE-2020-18190
Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture...
CVE-2020-18190
Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture...
CVE-2020-18191: Improper Limitation of a Pathname to a Restricted Directory
GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php...
PT-2020-15095
Name of the Vulnerable Software and Affected Versions Bludit version 3.8.1 Description The issue allows remote attackers to delete arbitrary files. This is achieved through a directory traversal attack. The attack vector is the "/admin/ajax/upload-profile-picture" API endpoint. Recommendations Fo...
CVE-2020-5787
Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...
CVE-2020-5787: Improper Limitation of a Pathname to a Restricted Directory
Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...
CVE-2020-5788: Improper Limitation of a Pathname to a Restricted Directory
Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action...
PT-2020-18709
Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk. This is achieved via the "admin/system/admin/certificates/delete" API endpoint. Recommendations For...
Vulnerabilities fixed in Trend Micro products
A vulnerability has been fixed in Trend Micro products. The vulnerability allows a locally authenticated malicious person to able to delete arbitrary files under SYSTEM privileges. delete. Trend Micro has released updates to fix the vulnerability. fix. More information can be found on the page...
CVE-2020-5590
Directory traversal vulnerability in EC-CUBE 3.0.0 to 3.0.18 and 4.0.0 to 4.0.3 allows remote authenticated attackers to delete arbitrary files and/or directories on the server via unspecified vectors...
PT-2020-18564
Name of the Vulnerable Software and Affected Versions EC-CUBE versions 3.0.0 through 3.0.18 EC-CUBE versions 4.0.0 through 4.0.3 Description A directory traversal issue allows remote authenticated attackers to delete arbitrary files and/or directories on the server. Recommendations For versions...
DEBIAN-CVE-2020-3350
A vulnerability in the endpoint software of Cisco AMP for Endpoints and Clam AntiVirus could allow an authenticated, local attacker to cause the running software to delete arbitrary files on the system. The vulnerability is due to a race condition that could occur when scanning malicious files. A...
PT-2020-2976
Name of the Vulnerable Software and Affected Versions Cisco AMP for Endpoints affected versions not specified Clam AntiVirus affected versions not specified Description A vulnerability in the endpoint software could allow an authenticated, local attacker to delete arbitrary files on the system du...
Microsoft Windows Defender Elevation of Privilege Vulnerability (CNVD-2021-25011)
Microsoft Windows Defender is a suite of antivirus software that comes with Windows systems from the American company Microsoft. An elevation of privilege vulnerability exists in Microsoft Windows Defender, which can be exploited by an attacker to delete arbitrary files on the system by running a...
CVE-2020-8017
A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1...
PT-2020-19921
Name of the Vulnerable Software and Affected Versions texlive-filesystem versions prior to 2017.135-9.5.1 texlive-filesystem versions prior to 2013.74-16.5.1 openSUSE Leap 15.1 texlive-filesystem versions prior to 2017.135-lp151.8.3.1 Description A race condition enabling link following issue in...