PT-2015-3707

Name of the Vulnerable Software and Affected Versions Check MK versions prior to 1.2.2p3 Check MK versions 1.2.3x prior to 1.2.3i5 Description The issue allows remote authenticated users to delete arbitrary files via a request to an unspecified link, related to "Insecure Direct Object References....

Directory traversal

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...

CVE-2015-2971: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Seeds acmailer before 3.8.18 and 3.9.x before 3.9.12 Beta allows remote authenticated users to delete arbitrary files via a crafted string...

Samsung SyncThru UpdateDriverFileServlet Directory Traversal Denial of Service Vulnerability

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of Samsung SyncThru. By default, authentication is not required to exploit this vulnerability. The specific flaw exists within the DriverFileUploadServlet servlet exposed by upload/updateDriver. The...

CVE-2014-1836

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...

PT-2015-3691

Name of the Vulnerable Software and Affected Versions ImpressCMS versions prior to 1.3.6 Description The issue allows remote attackers to delete arbitrary files via a full pathname in the image path parameter in a cancel action. This is due to an absolute path traversal vulnerability in the...

CVE-2014-1836: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in htdocs/libraries/image-editor/image-edit.php in ImpressCMS before 1.3.6 allows remote attackers to delete arbitrary files via a full pathname in the imagepath parameter in a cancel action...

CVE-2015-4351

CVE-2015-4351 affects the Drupal Spider Video Player module. Remote authenticated users with the access Spider Video Player administration permission could delete arbitrary files via a crafted URL. The issue stems from insufficient validation of delete requests (and related CSRF protections) in t...

PT-2015-3799

Name of the Vulnerable Software and Affected Versions New Atlanta BlueDragon versions prior to 7.1.1.18527 Description The issue allows remote attackers to potentially read or delete arbitrary files due to a directory traversal vulnerability in the CFChart servlet. This is achieved by including a...

CVE-2015-0888

KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors...

CVE-2015-0888

KENT-WEB Clip Board before 4.1 allows remote attackers to delete arbitrary files via unspecified vectors...

PT-2015-4944

Name of the Vulnerable Software and Affected Versions KENT-WEB Clip Board versions prior to 4.1 Description The issue allows remote attackers to delete arbitrary files via unspecified vectors. Recommendations For versions prior to 4.1, update to version 4.1 or later to resolve the issue...

Samsung Security Manager Security Bypass Vulnerability

Samsung Security Manager is a centralized management platform for video recording devices from Samsung in South Korea, which supports site group management, displaying a list of registered devices, and enabling playback of specified video borders through mouse drag-and-drop or double-click...

PT-2015-5332

Name of the Vulnerable Software and Affected Versions Samsung Security Manager versions prior to 1.31 Description The issue allows remote attackers to delete arbitrary files, resulting in a denial of service, by sending a DELETE request to the ActiveMQ Broker in Samsung Security Manager...

CVE-2014-9372

Directory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password Manager Pro PMP before 7103 allows remote attackers to delete arbitrary files via a .. dot dot in a filename...

CVE-2014-9372

Directory traversal vulnerability in the UploadAccountActivities servlet in ManageEngine Password Manager Pro PMP before 7103 allows remote attackers to delete arbitrary files via a .. dot dot in a filename...

PT-2014-8968

Name of the Vulnerable Software and Affected Versions ManageEngine Password Manager Pro versions prior to 7103 Description The issue is related to a directory traversal vulnerability in the UploadAccountActivities servlet. This allows remote attackers to delete arbitrary files by including a .. d...

CVE-2014-8737

Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in an archive to 1 strip or 2 objcopy or create arbitrary files via 3 a .. dot dot or full path name in an archive to ar...

CVE-2014-8737

Multiple directory traversal vulnerabilities in GNU binutils 2.24 and earlier allow local users to delete arbitrary files via a .. dot dot or full path name in an archive to 1 strip or 2 objcopy or create arbitrary files via 3 a .. dot dot or full path name in an archive to ar...

PT-2014-7017

Name of the Vulnerable Software and Affected Versions ZOHO ManageEngine OpManager versions 11.3 and earlier Social IT Plus version 11.0 IT360 versions 10.3, 10.4, and earlier Description The issue allows remote attackers or remote authenticated users to delete arbitrary files via a .. dot dot in...