PYSEC-2019-156

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...

Design/Logic Flaw

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...

PYSEC-2019-156

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...

UBUNTU-CVE-2013-4251

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...

CVE-2013-4251

The scipy.weave component in SciPy before 0.12.1 creates insecure temporary directories...

CVE-2013-4251

CVE-2013-4251 affects the SciPy package SciPy before 0.12.1, where the scipy.weave component can create insecure temporary directories. The issue stems from the handling of /tmp and current directories, enabling an attacker to place or execute code via a directory that may lack proper permissions...

CVE-2013-4251

Removed by vendor...

CVE-2019-16680

A path traversal vulnerability was discovered in the file-roller Archive Manager for GNOME in the way file paths with special characters are sanitized. Archives containing the sequence of characters "../" in a file path may be vulnerable to this flaw. A remote attacker could exploit this flaw by...

CVE-2019-18645

The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be written to privileged directories...

ytnef path traversal vulnerability

ytnef is a TNEF Transport Neutral Encapsulation Format stream reader for winmail.dat files. A path traversal vulnerability exists in ytnef, which arises from a failure of a networked system or product to properly filter special elements in the path of a resource or file, and can be exploited by a...

ClipSoft REXPERT Directory Traversal Vulnerability

ClipSoft REXPERT is a report generation program from ClipSoft Korea. A directory traversal vulnerability exists in ClipSoft REXPERT. An attacker can exploit this vulnerability to access locations outside of a restricted directory...

CVE-2019-18645

The quarantine restoration function in Total Defense Anti-virus 11.5.2.28 is vulnerable to symbolic link attacks, allowing files to be written to privileged directories...

CVE-2019-18645

CVE-2019-18645 affects Total Defense Anti-virus 11.5.2.28. The quarantine restoration function is susceptible to symbolic link attacks, allowing files to be written to privileged directories. The cited sources consistently describe a local impact enabling modification of privileged targets via th...

CVE-2019-11482

Sander Bos discovered a time of check to time of use TOCTTOU vulnerability in apport that allowed a user to cause core files to be written in arbitrary directories...

Repetier-Server Path Traversal Vulnerability

Repetier-Server is a 3D printer control application. A path traversal vulnerability in the RepetierServer.exe file in Repetier-Server versions 0.8 through 0.91, which arises from a failure of a networked system or product to properly filter for specific elements in the path of a resource or file,...

FusionPBX Path Traversal Vulnerability (CNVD-2019-37368)

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A path traversal vulnerability exists in FusionPBX. An attacker could exploit this...

CVE-2019-18192

GNU Guix 1.0.1 allows local users to gain access to an arbitrary user's account because the parent directory of the user-profile directories is world writable, a similar issue to CVE-2019-17365...

WordPress history-collection plugin path traversal vulnerability

WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. history-collection is a history plugin used in it. A path traversal vulnerability exists in the WordPress history-collection plugi...

nostromo nhttpd path traversal vulnerability

nostromo nhttpd is an open source web server . A path traversal vulnerability exists in the 'httpverify' function in nostromo nhttpd 1.9.6 and earlier. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or file. An...

WordPress s3bubble-amazon-s3-html-5-video-with-adverts plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. s3bubble-amazon-s3-html-5-video-with-adverts is a video player plugin for streaming Amazon S3 used in it. A path traversal vulnerabili...