CVE-2020-6225: Improper Limitation of a Pathname to a Restricted Directory

SAP NetWeaver Knowledge Management, versions KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50, does not sufficiently validate path information provided by users, thus characters representing traverse to parent directory are passed through to the file APIs,...

CVE-2020-11701

An issue was discovered in ProVide formerly zFTPServer through 13.1. CSRF exists in the User Web Interface, as demonstrated by granting filesystem access to the public for uploading and deleting files and directories...

CVE-2020-10619

An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's versions prior to 3.0.2 control...

CVE-2020-10631

An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's versions prior to 3.0.2 control...

CVE-2020-10631

An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's versions prior to 3.0.2 control...

Design/Logic Flaw

An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's versions prior to 3.0.2 control...

CVE-2020-10619

An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's versions prior to 3.0.2 control...

CVE-2020-8017

A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1...

CVE-2020-8017

A Race Condition Enabling Link Following vulnerability in the cron job shipped with texlive-filesystem of SUSE Linux Enterprise Module for Desktop Applications 15-SP1, SUSE Linux Enterprise Software Development Kit 12-SP4, SUSE Linux Enterprise Software Development Kit 12-SP5; openSUSE Leap 15.1...

Arbitrary File Deletion Vulnerability in ForU CMS

4UCMS Information Technology Co., Ltd. was founded in 2005, focusing on enterprise-level and individual network integrated marketing services, taking the lead in providing a full range, systematic, segmented professional network integrated marketing solutions. ForU CMS has an arbitrary file...

CVE-2019-16064

NETSAS Enigma NMS 65.0.0 and prior suffers from a directory traversal vulnerability that can allow an authenticated user to access files and directories stored outside of the web root folder. By exploiting this vulnerability, it is possible for an attacker to list operating-system directory...

Microsoft Windows Mobile Device Management Diagnostics Elevation of Privilege Vulnerability

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. Mobile Device Management Diagnostics is one of the mobile device management diagnostics...

DM enterprise website system background exists arbitrary file deletion vulnerability

DM enterprise building system is developed by php + mysql a set of specialized in small and medium-sized enterprise website construction of open source cms. DM enterprise website system background there are arbitrary file deletion vulnerability , an attacker can exploit the vulnerability to delet...

CVE-2015-3150

abrt-dbus in Automatic Bug Reporting Tool ABRT allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the 1 ChownProblemDir, 2 DeleteElement, or 3 DeleteProblem method...

CVE-2015-3150

abrt-dbus in Automatic Bug Reporting Tool ABRT allows local users to delete or change the ownership of arbitrary files via the problem directory argument to the 1 ChownProblemDir, 2 DeleteElement, or 3 DeleteProblem method...

Juniper Networks Junos OS Path Traversal Vulnerability

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. A path traversal vulnerability in Juniper Networks Junos OS can be exploited by an authenticated, remote attacker to submi...

The vulnerability of Huawei P20’s microprogramming software arises from insufficient validation of input data, allowing a hacker to delete arbitrary files on the vulnerable device.

The vulnerability of Huawei P20’s microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to delete any files on the vulnerable device...

CVE-2019-18342

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The SFTP service default port 22/tcp of the Control Center Server CCS does not properly limit its capabilities to the specified purpose. In conjunction with CVE-2019-18341, an unauthenticated remote attacker wit...

Dell Command Update Backlink Vulnerability

Dell Command Update is a tool from Dell USA for automating driver, BIOS and firmware updates in Dell products. A backlink vulnerability exists in versions prior to Dell Command Update 3.1, which can be exploited by a local attacker to delete arbitrary files by creating symbolic links...

ABB Relion 670 Series Path Traversal Vulnerability

The ABB Relion 670 Series is a transmission protection control device from ABB Switzerland. A path traversal vulnerability exists in the ABB Relion 670 Series, which can be exploited by an attacker to read and delete files on the device...