982 matches found
PT-2023-7821 · Schneider Electric · Apc Easy Ups Online Monitoring
Name of the Vulnerable Software and Affected Versions: APC Easy UPS Online Monitoring Software affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as a 'Path Traversal' vulnerability. This could allow an...
The vulnerability of the web portal of the microprogramming software for TP-Link Archer VR1600V (AC1600) allows a hacker to gain access to read, modify, or delete files, execute arbitrary commands, or trigger a service failure.
The vulnerability of the web-based software platform of TP-Link Archer VR1600V AC1600 wireless VoIP routers lies in the lack of measures to neutralize special elements used in the operating system’s processing of the variable XTPIfName. Exploiting this vulnerability can allow an attacker to gain...
Design/Logic Flaw
PyInstaller bundles a Python application and all its dependencies into a single package. A PyInstaller built application, elevated as a privileged process, may be tricked by an unprivileged attacker into deleting files the unprivileged user does not otherwise have access to. A user is affected if...
Flatsome < 3.17.6 - Unauthenticated PHP Object Injection
Description The Flatsome theme for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 3.17.5 via deserialization of untrusted input. This allows unauthenticated attackers to inject a PHP Object. If a POP chain is present via an additional plugin or theme installed o...
CVE-2023-6265
UNSUPPORTED WHEN ASSIGNED Draytek Vigor2960 v1.5.1.4 and v1.5.1.5 are vulnerable to directory traversal via the mainfunction.cgi dumpSyslog 'option' parameter allowing an authenticated attacker with access to the web management interface to delete arbitrary files. Vigor2960 is no longer supported...
CVE-2023-42428
Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system...
CVE-2023-42428
Directory traversal vulnerability in CubeCart prior to 6.5.3 allows a remote authenticated attacker with an administrative privilege to delete directories and files in the system...
Devellion CubeCart Security Breach
Devellion CubeCart is a free and open source e-commerce shopping cart software from the company of Devellion UK. The software supports selling products, adding/editing products or images in an online store, etc. A security vulnerability exists in Devellion CubeCart versions prior to 6.5.3, which...
PT-2023-28335 · Cubecart · Cubecart
Name of the Vulnerable Software and Affected Versions: CubeCart versions prior to 6.5.3 Description: A directory traversal issue allows a remote authenticated attacker with administrative privileges to delete directories and files in the system. Recommendations: For versions prior to 6.5.3, updat...
Fortinet FortiWAN 路径遍历漏洞
Fortinet FortiWAN is a network appliance from Fortinet, Inc. It is used to perform load balancing and fault tolerance between different networks. A path traversal vulnerability exists in Fortinet FortiWAN, which stems from improperly restricting pathnames to restricted directories, and can be...
PT-2023-25082 · Aveva · Application Server +14
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: This issue could allow a local OS-authenticated user with standard privileges to delete files with System privilege on the machine where the products ar...
UBUNTU-CVE-2023-41914
SchedMD Slurm 23.02.x before 23.02.6 and 22.05.x before 22.05.10 allows filesystem race conditions for gaining ownership of a file, overwriting a file, or deleting files...
CVE-2022-3700
A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...
Code injection
A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...
CVE-2022-3700
A Time of Check Time of Use TOCTOU vulnerability was reported in the Lenovo Vantage SystemUpdate Plugin version 2.0.0.212 and earlier that could allow a local attacker to delete arbitrary files...
CVE-2023-43803
Arduino Create Agent is a package to help manage Arduino development. This vulnerability affects the endpoint /v2/pkgs/tools/installed and the way it handles plugin names supplied as user input. A user who has the ability to perform HTTP requests to the localhost interface, or is able to bypass t...
Arduino path traversal vulnerability
Arduino is a microcontroller board from the Arduino project. A security vulnerability exists in Arduino Create Agent. An attacker can exploit this vulnerability to delete arbitrary files or folders...
The vulnerability of the FileMgmtExport class in the Advanced Core Operating System (ACOS) controller A10 Thunder ADC allows a hacker to read and delete any files they desire.
The vulnerability of the FileMgmtExport class in the Advanced Core Operating System ACOS controller A10 Thunder ADC lies in an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to read and delete any files at will from...
