10821 matches found
CVE-2022-44942
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...
CVE-2022-44942
Casdoor before v1.126.1 was discovered to contain an arbitrary file deletion vulnerability via the uploadFile function...
CVE-2022-45829 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletion
Auth. Path Traversal vulnerability in Easy WP SMTP plugin = 1.5.1 at WordPress...
Design/Logic Flaw
ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use this vulnerability to maliciously delete and modify files...
CVE-2022-23143
ZTE OTCP product is impacted by a permission and access control vulnerability. Due to improper permission settings, an attacker with high permissions could use this vulnerability to maliciously delete and modify files...
ZTE OTCP 安全漏洞
ZTE OTCP is a set of next-generation network management platform products from ZTE Corporation ZTE in China. ZTE OTCP has a privilege and access control vulnerability, which originates from improper privilege settings and can be exploited by attackers to maliciously delete and modify files...
CVE-2022-45797
An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and delete files on affected installations. Please note: an attacker must first obtain the ability to...
CVE-2022-45797
Summary (CVE-2022-45797): A local arbitrary-file-deletion vulnerability in Trend Micro’s Damage Cleanup Engine affects Trend Micro Apex One and Apex One as a Service. The issue allows a local attacker to escalate privileges and delete files on vulnerable installations, requiring initial low-privi...
CVE-2022-45797
An arbitrary file deletion vulnerability in the Damage Cleanup Engine component of Trend Micro Apex One and Trend Micro Apex One as a Service could allow a local attacker to escalate privileges and delete files on affected installations. Please note: an attacker must first obtain the ability to...
PT-2022-5944 · Trend Micro · Trend Micro Apex One +1
Name of the Vulnerable Software and Affected Versions: Trend Micro Apex One affected versions not specified Trend Micro Apex One as a Service affected versions not specified Description: The issue is related to an arbitrary file deletion vulnerability in the Damage Cleanup Engine component. This...
Easy WP SMTP < 1.5.2 - Admin+ Arbitrary File Deletion
The plugin does not validate some user input used to generate paths, which could allow high privilege users such as admin to delete arbitrary files even when they should not be able to, for example in multisite via a traversal attack...
Schneider Electric IGSS Arbitrary File Deletion (CVE-2021-22823)
An arbitrary file deletion vulnerability exists in Schneider Electric IGSS. This vulnerability is due to insufficient input validation...
CVE-2022-43196
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...
Arbitrary file deletion
dedecmdv6 v6.1.9 is vulnerable to Arbitrary file deletion via filemanagecontrol.php...
CVE-2022-44280
Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...
CVE-2022-44280
Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...
CVE-2022-44280
Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...
PT-2022-26792 · Dedecmdv6 · Dedecmdv6
Name of the Vulnerable Software and Affected Versions: dedecmdv6 version 6.1.9 Description: The issue allows for Arbitrary file deletion via the "file manage control.php" endpoint. Recommendations: For dedecmdv6 version 6.1.9, consider restricting access to the "file manage control.php" endpoint...
CVE-2022-44280
Automotive Shop Management System v1.0 is affected by an endpoint vulnerability: an attacker can delete arbitrary files via /asms/classes/Master.php?f=delete_img. The connected records confirm the affected product and the exact API parameter, with potential high impact on integrity and availabili...