CVE-2017-14179

Apport before 2.13 does not properly handle crashes originating from a PID namespace allowing local users to create certain files as root which an attacker could leverage to perform a denial of service via resource exhaustion, possibly gain root privileges, or escape from containers...

Arbitrary File Creation Vulnerability in YidaCMS Web Management System JS1.8.0 Version

YidaCMS website management system is a simple, practical and efficient website builder. YidaCMS website management system JS1.8.0 version exists arbitrary file creation vulnerability, the attacker through the creation of parsable script file, edit and save the Trojan code will be injected into th...

Arbitrary File Creation Vulnerability in ourphp v1.8.0

Ourphp website building system is a php+mysql website building system. ourphp v1.8.0 version of the existence of arbitrary file creation vulnerability, the attacker can be edited through the background of the online template comes with the creation point to create any suffix file and write Trojan...

Design/Logic Flaw

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16606

This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. Th...

CVE-2017-16603

CVE-2017-16603 affects NetGain Systems Enterprise Manager 7.2.730 build 1034. The flaw is in the org.apache.jsp.u.jsp.settings.upload_005ffile_005fdo_jsp servlet (port 8081 by default) where filename parameter handling fails to properly validate user-supplied data, allowing an attacker to upload ...

CVE-2017-16606: Improper Limitation of a Pathname to a Restricted Directory

This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. Th...

CVE-2017-15111

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link...

Code injection

keycloak-httpd-client-install versions before 0.8 insecurely creates temporary file allowing local attackers to overwrite other files via symbolic link...

PT-2017-14490

Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to execute code by creating arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, th...

PT-2017-14478

Name of the Vulnerable Software and Affected Versions NetGain Systems Enterprise Manager version 7.2.730 build 1034 Description This issue allows remote attackers to create arbitrary files on vulnerable installations. Although authentication is required to exploit this issue, the existing...

PT-2017-10894

Name of the Vulnerable Software and Affected Versions October CMS build 412 Description The issue allows for file path modification in the asset move functionality, potentially resulting in the creation of malicious files on the server. Recommendations For October CMS build 412, update to a versi...

CVE-2017-1000197: Undefined Security Weakness

October CMS build 412 is vulnerable to file path modification in asset move functionality resulting in creating creating malicious files on the server...

CVE-2017-1000382

VIM version 8.0.1187 and other versions most likely ignores umask when creating a swap file "ORIGINALFILENAME.swp" resulting in files that may be world readable or otherwise accessible in ways not intended by the user running the vi binary...

OpenSSH < 7.6

According to its banner, the version of OpenSSH running on the remote host is prior to 7.6. It is, therefore, affected by a file creation restriction bypass vulnerability related to the 'processopen' function in the file 'sftp-server.c' that allows authenticated users to create zero-length files...

Docker Temporary File Creation Vulnerability

Docker is an open source application container engine from Docker Inc. in the United States, which supports the creation of a container lightweight virtual machine and deployment and running applications on Linux systems, as well as automated installation, deployment and upgrading of applications...

CVE-2017-7552

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core...

CVE-2017-7552

A flaw was discovered in the file editor of millicore, affecting versions before 3.19.0 and 4.x before 4.5.0, which allows files to be executed as well as created. An attacker could use this flaw to compromise other users or teams projects stored in source control management of the RHMAP Core...

PVS XDSW, Error: "(vsan) cannot complete file creation operation"

Symptoms: PVS console returns the error "vsan cannot complete file creation operation". CDF traces show exception "CreateWriteCacheDisk failed to CreateBlankVHD : Citrix.Xip.XipException: A general system error occurred: PBM error occurred during PreProcessReconfigureSpec: pbm.fault.PBMFault;Erro...

CVE-2017-8012

In EMC ViPR SRM, Storage M&R, VNX M&R, and M&R Watch4Net for SAS Solution Packs, the Java Management Extensions JMX protocol used to communicate between components in the Alerting and/or Compliance components can be leveraged to create a denial of service DoS condition. Attackers with knowledge o...