4398 matches found
AIX 7.2 TL 5 : audit (IJ38117)
https://vulners.com/cve/CVE-2021-38955 https://vulners.com/cve/CVE-2021-38955 IBM AIX could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text in the...
Security Bulletin: Vulnerability in AIX audit commands (CVE-2021-38955)
Summary There is a vulnerability in the AIX audit user commands. Vulnerability Details CVEID:CVE-2021-38955 DESCRIPTION: IBM AIX could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. CVSS Base score: 4.4 CVSS...
There is a vulnerability in the AIX audit user commands for VIOS.,There is a vulnerability in the AIX audit user commands.
IBM SECURITY ADVISORY First Issued: Mon Feb 28 16:34:28 CST 2022 The most recent version of this document is available here: http://aix.software.ibm.com/aix/efixes/security/auditadvisory.asc https://aix.software.ibm.com/aix/efixes/security/auditadvisory.asc...
CVE-2021-38955
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a local user with elevated privileges to cause a denial of service due to a file creation vulnerability in the audit commands. IBM X-Force ID: 211825...
CVE-2022-25359
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files...
CVE-2022-25359: Missing Authentication for Critical Function
On ICL ScadaFlex II SCADA Controller SC-1 and SC-2 1.03.07 devices, unauthenticated remote attackers can overwrite, delete, or create files...
SUSE SLES12 Security Update : nodejs14 (SUSE-SU-2022:0569-1)
The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0569-1 advisory. - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe bsc1192153. - CVE-2021-32803: Fixed insufficient symli...
SUSE SLES15 Security Update : nodejs8 (SUSE-SU-2022:0563-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0563-1 advisory. - CVE-2021-23343: Fixed ReDoS via splitDeviceRe, splitTailRe and splitPathRe bsc1192153. - CVE-2021-32803: Fixed insufficient symli...
pfSense Diag Routes Web Shell Upload
This module exploits an arbitrary file creation vulnerability in the pfSense HTTP interface CVE-2021-41282. The vulnerability affects versions use exploit/unix/http/pfsense/diagrouteswebshell msf undefineddiagrouteswebshell show actions ...actions... msf undefineddiagrouteswebshell set ACTION msf...
SUSE SLES12 Security Update : nodejs12 (SUSE-SU-2022:0531-1)
The remote SUSE Linux SLES12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:0531-1 advisory. - All versions of package path-parse are vulnerable to Regular Expression Denial of Service ReDoS via splitDeviceRe, splitTailRe, and splitPath...
CVE-2021-26618
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code...
CVE-2021-26618
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code...
CVE-2021-26618
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code...
Input validation
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code...
CVE-2021-26618 Tmax ToOffice arbitrary file creation vulnerability
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code...
CVE-2021-26618
The CVE-2021-26618 entry relates to TmaxSoft ToOffice/ToWord, caused by improper input validation that enables arbitrary file creation. Remote attackers can leverage this to execute arbitrary code contained in malicious files. The provided datasets confirm the vulnerability, its impact (arbitrary...
PT-2022-9767
Name of the Vulnerable Software and Affected Versions ToOffice affected versions not specified Description An issue with improper input validation has been found, leading to the ability to create arbitrary files. This can be exploited by remote attackers to execute malicious code included in thes...
CVE-2021-26618: Improper Input Validation
An improper input validation leading to arbitrary file creation was discovered in ToWord of ToOffice. Remote attackers use this vulnerability to execute arbitrary file included malicious code...
CVE-2022-24312
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification of an existing file by adding at end of file or create a new file in the context of the Data Server potentially leading to remote code execution when an attacker sends a...