CVE-2017-13680

Summary: CVE-2017-13680 affects Symantec Endpoint Protection (SEP) Windows endpoints. The vulnerability allows an attacker to perform unauthorized file deletions via the product UI. Affected versions are SEP 12.1 RU6 MP9 and SEP 14 RU1. Root cause/impact: UI-driven file deletion on the resident f...

Symantec Endpoint Protection Multiple Issues

SUMMARY Symantec has released a set of updates to address three issues in the Symantec Endpoint Protection SEP product. AFFECTED PRODUCTS Symantec Endpoint Protection SEP --- CVE | Affected Versions | Remediation CVE-2017-13681 | Prior to 12.1 RU6 MP9 | Upgrade to 12.1 RU6 MP9 Symantec Endpoint...

Arbitrary file deletion

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .swf files that can have its code executed when a user tries to download the file...

Arbitrary file deletion

Mahara 1.8 before 1.8.7 and 1.9 before 1.9.5 and 1.10 before 1.10.3 and 15.04 before 15.04.0 are vulnerable to a maliciously created .xml file that can have its code executed when user tries to download the file...

Emlog blog system has an arbitrary file deletion vulnerability

emlog is a PHP and MySQL based blog and CMS builder. There is an arbitrary file deletion vulnerability in the Emlog blog system. The vulnerability is due to the program on the parameters of the filter is not strict due to the attacker by adding a malicious payload execution, you can delete...

Arbitrary file deletion

myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...

The vulnerability of the System Health service configuration in software for IT service management and intelligent monitoring of application performance management allows attackers to bypass authentication procedures and arbitrarily delete or upload files.

The vulnerability of the System Health service configuration in software for IT service management and intelligent monitoring of application performance management is related to deficiencies in authentication procedures. Exploiting this vulnerability allows a malicious actor to bypass...

Cisco Network Analysis Module Software Directory Traversal Vulnerability

Cisco Network Analysis Module Software NAM is a network traffic analysis software from the American company Cisco Cisco. A directory traversal vulnerability exists in the web interface in Cisco NAM, which stems from the program's failure to perform proper input validation for HTTP requests. A...

WordPress Awesome Support plugin <= 4.3.1 - Authenticated Arbitrary File Deletion Vulnerability

WordPress Awesome Support plugin Authenticated Arbitrary File Deletion Vulnerability exists in the function wpastoolslogviewerdelete accessible to anyone logged in, by allowing access through WordPress’ AJAX functionality in the file /includes/admin/functions-log-viewer.php: Solution Update the...

CVE-2017-2132

Panasonic KX-HJB1000 Home unit devices with firmware GHX1YG 14.50 or HJB10004.47 allow an attacker to delete arbitrary files in a specific directory via unspecified vectors...

CVE-2017-12285

A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...

Directory traversal

A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validatio...

Panasonic Home Unit KX-HJB1000 Arbitrary File Deletion Vulnerability

The Panasonic KX-HJB1000 Home unit devices is a webcam from Panasonic Japan. An arbitrary file deletion vulnerability exists in the Panasonic Home Unit KX-HJB1000. An attacker can use this vulnerability to delete arbitrary files in a directory...

Home unit KX-HJB1000 contains multiple vulnerabilities

Overview Home unit KX-HJB1000 provided by Panasonic Corporation is a control system for home network. Home unit KX-HJB1000 contains multiple vulnerabilities listed below. Taizoh Tsukamoto of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

JVN#54795166: Home unit KX-HJB1000 contains multiple vulnerabilities

Home unit KX-HJB1000 provided by Panasonic Corporation is a control system for home network. Home unit KX-HJB1000 contains multiple vulnerabilities listed below. Improper access control - CVE-2017-2131 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N| Base...

Cross-site Scripting (XSS)

concrete5 is vulnerable to cross-site scripting XSS attacks. The library does not sanitize the filename before displaying it during file deletion, allowing a malicious user to inject and execute arbitrary web script...

HP Intelligent Management Center Arbitrary File Deletion Vulnerability (CNVD-2017-33293)

HP Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. An arbitrary file deletion vulnerability exists in HPE Intelligent Management Center, where a remote...

HP Intelligent Management Center Arbitrary File Deletion Vulnerability

HP Intelligent Management Center IMC is a comprehensive management platform built from the ground up to support the Fault, Configuration, Accounting, Performance and Security FCAPS model. An arbitrary file deletion vulnerability exists in HP Intelligent Management Center, where a remote...

CVE-2017-13984

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal...

CVE-2017-13984

An authentication vulnerability in HPE BSM Platform Application Performance Management System Health product versions 9.26, 9.30 and 9.40, allows remote users to delete arbitrary files via servlet directory traversal...