PT-2017-10097

Name of the Vulnerable Software and Affected Versions Xen affected versions not specified Description The issue allows local pygrub-using guest OS administrators to read or delete arbitrary files on the host. This is achieved through string quotes and S-expressions in the bootloader configuration...

PT-2016-7245

Name of the Vulnerable Software and Affected Versions File Roller versions 3.5.4 through 3.20.2 Description The issue allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive. This is related to the g file remove directory function in file-utils.c...

CVE-2016-1434

The license-certificate upload functionality on Cisco 8800 phones with software 11.01 allows remote authenticated users to delete arbitrary files via an invalid file, aka Bug ID CSCuz03010...

CVE-2016-4360

web/admin/data.js in the Performance Center Virtual Table Server VTS component in HPE LoadRunner 11.52 through patch 3, 12.00 through patch 1, 12.01 through patch 3, 12.02 through patch 2, and 12.50 through patch 3 and Performance Center 11.52 through patch 3, 12.00 through patch 1, 12.01 through...

ImageMagick: File deletion

It was discovered that certain ImageMagick coders and pseudo-protocols did not properly prevent security sensitive operations when processing specially crafted images. A remote attacker could create a specially crafted image that, when processed by an application using ImageMagick or an...

CVE-2016-3715

The EPHEMERAL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to delete arbitrary files via a crafted image...

CVE-2006-1251

Argument injection vulnerability in greylistclean.cron in sa-exim 4.2 allows remote attackers to delete arbitrary files via an email with a To field that contains a filename separated by whitespace, which is not quoted when greylistclean.cron provides the argument to the rm command...

PT-2015-7022

Name of the Vulnerable Software and Affected Versions Avast versions prior to 150918-0 Description A directory traversal issue allows remote attackers to delete or write to arbitrary files by crafting a specific entry in a ZIP archive. Recommendations For versions prior to 150918-0, update to...

PT-2015-2433

Name of the Vulnerable Software and Affected Versions Adobe Reader and Acrobat versions 10.x through 10.1.15 Adobe Reader and Acrobat versions 11.x through 11.0.12 Acrobat and Acrobat Reader DC Classic versions prior to 2015.006.30094 Acrobat and Acrobat Reader DC Continuous versions prior to...

PT-2016-1293

Name of the Vulnerable Software and Affected Versions Moodle versions 2.6.11 and earlier, 2.7.x through 2.7.9, 2.8.x through 2.8.7, 2.9.x through 2.9.1 Description The issue is related to insufficient access control in the wiki component, allowing remote authenticated users to delete arbitrary...

The vulnerability of the Internet Explorer browser, which allows a violator to delete arbitrary files

The vulnerability of the Internet Explorer browser is related to deficiencies in access control for certain functions. Exploiting this vulnerability allows a malicious actor to delete any files remotely...

CVE-2015-6459: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in the download feature in FileDownloadServlet in GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise before 3.1.5 allows remote attackers to read or delete arbitrary files via a full pathname...

PT-2015-7484

Name of the Vulnerable Software and Affected Versions Drupal OSF module versions 7.x-3.x before 7.x-3.1 Description The issue allows user-assisted remote attackers to delete arbitrary files when the OSF Ontology and OSF Import modules are enabled. Recommendations For versions 7.x-3.x before...

PT-2015-3063

Name of the Vulnerable Software and Affected Versions GE Digital Energy MDS PulseNET and MDS PulseNET Enterprise versions prior to 3.1.5 Description The issue is related to an absolute path traversal vulnerability in the download feature of the FileDownloadServlet. This vulnerability allows remot...

CVE-2015-2484: Undefined Security Weakness

Microsoft Internet Explorer 10 and 11 uses an incorrect flag during certain filesystem accesses, which allows remote attackers to delete arbitrary files via unspecified vectors, aka "Tampering Vulnerability."...

PT-2015-2010

Name of the Vulnerable Software and Affected Versions Microsoft Windows Vista SP2 Microsoft Windows Server 2008 SP2 and R2 SP1 Microsoft Windows 7 SP1 Microsoft Windows 8 Microsoft Windows 8.1 Microsoft Windows Server 2012 Gold and R2 Microsoft Windows RT Gold and 8.1 Microsoft Windows 10...

CVE-2014-2332

CheckMK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...

Design/Logic Flaw

CheckMK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...

CVE-2014-2332

CheckMK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...

CVE-2014-2332

CheckMK before 1.2.2p3 and 1.2.3x before 1.2.3i5 allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References." NOTE: this can be exploited by remote attackers by leveraging CVE-2014-2330...