SonicWall SMA100 Path Traversal Vulnerability

The SonicWall SMA100 is a secure access gateway appliance from SonicWall USA. A path traversal vulnerability exists in the SonicWall SMA100. The vulnerability stems from a failure of a network system or product to properly filter for specific elements in a resource or file path. An attacker could...

Plex Media Server Path Traversal Vulnerability

Plex Media Server is a media player and media server software. A path traversal vulnerability in the Camera Upload feature in Plex Media Server 1.18.2.2029 and prior versions, which arises from a failure of a networked system or product to properly filter for specific elements in the path of a...

Roxy Fileman Path Traversal Vulnerability (CNVD-2020-03726)

Roxy Fileman is a set of open source file browser for . A path traversal vulnerability exists in Roxy Fileman version 1.4.5 for . The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker could use th...

Intesync Solismed Directory Traversal Vulnerability

Intesync Solismed is a clinic management system designed for use by independent and free clinics. A directory traversal vulnerability exists in Intesync Solismed. An attacker could use this vulnerability to access locations outside of a restricted directory...

CVE-2019-18338

A vulnerability has been identified in Control Center Server CCS All versions V1.5.0. The Control Center Server CCS contains a directory traversal vulnerability in its XML-based communication protocol as provided by default on ports 5444/tcp and 5440/tcp. An authenticated remote attacker with...

Siemens SiNVR 3 Central Control Server (CCS) Directory Traversal Vulnerability

SiNVR is the Siemens OEM version of SiVMS, a video management solution acquired by PKE Deutsch land gmmbH and formerly distributed by Schille Informationssysteme gmmbH. Siemens SiNVR 3 Central Control Server CCS has a directory traversal vulnerability in its xml-based communication protocol. An...

Threat Analysis Unit (TAU) Threat Intelligence Notification: Cyborg Ransomware

Cyborg Ransomware was found being distributed via spear-phishing email campaign which contains a fake “Windows Update” email which appears as a ‘.jpg’ file in the email attachment, but is instead a ‘.exe’ binary file. It tries to tempt users to click on the malicious attachment file in order to...

kernel: Missing check in fs/inode.c:inode_init_owner() does not clear SGID bit on non-directories for non-members

A vulnerability was found in the fs/inode.c:inodeinitowner function logic of the LInux kernel that allows local users to create files with an unintended group ownership and with group execution and SGID permission bits set, in a scenario where a directory is SGID and belongs to a certain group an...

Unauthorized access vulnerability in Haier wireless routers

Haier Group, founded in 1984, is the world's No. 1 brand of large home appliances and has transformed from a traditional manufacturer of home appliances to a platform for incubating creators for the whole society. Haier Wireless Router has an unauthorized access vulnerability, which can be...

Allied Telesis AT-GS950/8 Directory Traversal Vulnerability

The Allied Telesis AT-GS950/8 is a switch from Allied Telesis Japan. A path traversal vulnerability exists in the web interface in the Allied Telesis AT-GS950/8. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or...

CVE-2019-5268

Some Huawei home routers have an input validation vulnerability. Due to input parameter is not correctly verified, an attacker can exploit this vulnerability by sending special constructed packets to obtain files in the device and upload files to some directories...

CVE-2019-5268

CVE-2019-5268 affects certain Huawei home routers due to improper input validation (input parameter not correctly verified). An attacker can send specially crafted packets to obtain files from the device and upload files to some directories, impacting confidentiality and integrity. The issue is d...

Directory Traversal Vulnerability in ZTE ZXR10 1800-2S

The ZXR10 1800-2S is a router product from China's ZTE Corporation ZTE. A directory traversal vulnerability exists in the ZTE ZXR10 1800-2S. An attacker can exploit this vulnerability to arbitrarily browse a website directory, resulting in the disclosure of private website files and directories...

Naver Vaccine Path Traversal Vulnerability

Naver Vaccine is a suite of computer security protection software from the Korean company Naver. Naver Vaccine suffers from a path traversal vulnerability. The vulnerability stems from a failure of a network system or product to properly filter for specific elements in a resource or file path. An...

Nokia IMPACT Path Traversal Vulnerability

Nokia IMPACT is a suite of intelligent management platforms for the Internet of Things IoT from the Finnish company Nokia. A path traversal vulnerability exists in Nokia IMPACT. The vulnerability arises from a failure of a networked system or product to properly filter special elements in a...

CVE-2018-2025

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

Code injection

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

CVE-2018-2025

IBM Spectrum Protect Backup-Archive Client and IBM Spectrum Protect for Virtual Environments 7.1 and 8.1 creates directories/files in the CIT sub directory that are read/writable by everyone. IBM X-Force ID: 155551...

Insecure Temporary Directory Creation

rply creates temporary directory in an insecure manner. It uses tempfile.gettempdir to create /tmp directories per user, allowing any local user to perform symlink or hardlink attacks which can result in system directories being overwritten and causing a denial of service condition...

CloudBees Jenkins Support Core Plugin Path Traversal Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software release/testing projects and some timed tasks . Support Core Plugin is used in one of them to provide...