10659 matches found
CVE-2020-29494
Dell EMC Avamar Server, versions 19.1, 19.2, 19.3, contain a Path Traversal Vulnerability in PDM. A remote user could potentially exploit this vulnerability, to gain unauthorized write access to the arbitrary files stored on the server filesystem, causing deletion of arbitrary files...
Marvell QConvergeConsole GUI Authorization Issues Vulnerability
Marvell QConvergeConsole QCC is a unified adapter management software across data centers from Marvell. The software is primarily used for Ethernet and Fibre Channel adapter management, among other things. A security vulnerability exists in the Marvell QConvergeConsole GUI version 5.5.0.74 and...
CVE-2020-5804
Marvell QConvergeConsole GUI = 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this...
Path traversal
Marvell QConvergeConsole GUI = 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this...
CVE-2020-5804
Marvell QConvergeConsole GUI = 5.5.0.74 is affected by a path traversal vulnerability. The deleteEventLogFile method of the GWTTestServiceImpl class lacks proper validation of a user-supplied path prior to using it in file deletion operations. An authenticated, remote attacker can leverage this...
[SECURITY] [DSA 4828-1] libxstream-java security update
------------------------------------------------------------------------- Debian Security Advisory DSA-4828-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff January 07, 2021 https://www.debian.org/security/faq -...
Arbitrary File Deletion Vulnerability in Jinwei Mobile Mall (CNVD-2021-03384)
The business scope of Hubei Tao code thousand dimensional information science and technology limited company includes: computer software design, development, sales, technical services; system integration and so on. There is an arbitrary file deletion vulnerability in Jinwei Mobile Mall, which can...
UsualToolCMS suffers from an arbitrary file deletion vulnerability (CNVD-2021-03498)
UsualToolCMS UTCMS is a content management system and rapid site building framework. UsualToolCMS suffers from an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...
Arbitrary File Deletion Vulnerability in SeaCMS (CNVD-2021-03400)
SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...
Arbitrary File Deletion Vulnerability in SeaCMS
SeaCMS Ocean CMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...
Debian DLA-2507-1 : libxstream-java security update
Several security vulnerabilities were discovered in XStream, a Java library to serialize objects to XML and back again. CVE-2020-26258 XStream is vulnerable to a Server-Side Forgery Request which can be activated when unmarshalling. The vulnerability may allow a remote attacker to request data fr...
CVE-2020-35951
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurre...
CVE-2020-35951
CVE-2020-35951 affects the WordPress plugin Quiz and Survey Master in versions prior to 7.0.1. The issue is an arbitrary file deletion vulnerability: the function qsm_remove_file_fd_question can delete arbitrary files (e.g., wp-config.php) unauthenticated, potentially taking the site offline and ...
CVE-2020-35951
An issue was discovered in the Quiz and Survey Master plugin before 7.0.1 for WordPress. It allows users to delete arbitrary files such as wp-config.php file, which could effectively take a site offline and allow an attacker to reinstall with a WordPress instance under their control. This occurre...
[SECURITY] [DLA 2507-1] libxstream-java security update
Debian LTS Advisory DLA-2507-1 [email protected] https://www.debian.org/lts/security/ Markus Koschany December 31, 2020 https://wiki.debian.org/LTS Package : libxstream-java Version : 1.4.11.1-1+deb9u1 CVE ID : CVE-2020-26258 CVE-2020-26259 Debian Bug : 977625 977624 Several security...
WordPress Quiz and Survey Master plugin security vulnerability
WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A security vulnerability exists in the Quiz and Survey Master plugin before 7.0.1 for WordPress that...
File Deletion Vulnerability in MetInfo
MetInfo is an open source free CMS building system suitable for enterprise building. MetInfo has a file deletion vulnerability that can be exploited by attackers to compromise integrity...
Arbitrary file deletion vulnerability in fbyCMS (CNVD-2021-01927)
fbyCMS is a hospital management system that manages staff and patient records. An arbitrary file deletion vulnerability exists in fbyCMS, which can be exploited by an attacker to delete arbitrary files...
Arbitrary file deletion
In Arista EOS malformed packets can be incorrectly forwarded across VLAN boundaries in one direction. This vulnerability is only susceptible to exploitation by unidirectional traffic ex. UDP and not bidirectional traffic ex. TCP. This affects: EOS 7170 platforms version 4.21.4.1F and below releas...