February 11, 2020—KB4532691 (OS Build 17763.1039)

None None...

February 11, 2020—KB4537762 (OS Build 17134.1304)

None None...

SharpStat - C# Utility That Uses WMI To Run "cmd.exe /c netstat -n", Save The Output To A File, Then Use SMB To Read And Delete The File Remotely

C utility that uses WMI to run "cmd.exe /c netstat -n", save the output to a file, then use SMB to read and delete the file remotely Description This script will attempt to connect to all the supplied computers and use WMI to execute cmd.exe /c netstat -n . The file the output is saved to is...

January 14, 2020—KB4534293 (OS Build 17134.1246)

None None...

CVE-2019-19732

translationmanagetext.ajax.php and various manage.ajax.php in MFScripts YetiShare 3.5.2 through 4.5.3 directly insert values from the aSortDir0 and/or sSortDir0 parameter into a SQL string. This allows an attacker to inject their own SQL and manipulate the query, typically extracting data from th...

Security Bulletin: File Management Vulerability in IBM Watson Studio Local

Summary A security vulnerability involving symbolic links allowed arbitrary access to Watson Studio Local user directory. This vulnerability is addressed Vulnerability Details Third Party Entry: PSIRT-ADV0011814 DESCRIPTION: CVSS Base score: 8.8 CVSS Vector:...

File Upload Vulnerability in YunMOk Background Resource File Management

YunMOk is a general website management system under Nanchong Tiger Cloud Network Technology Co. There is a file upload vulnerability in the background resource file management of the cloud module, which can be exploited by an attacker to gain access to website administrator privileges...

CVE-2019-5211

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

Design/Logic Flaw

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

CVE-2019-5211

The Huawei Share function of P20 phones with versions earlier than Emily-L29C 9.1.0.311 has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully...

CVE-2019-5211

The CVE-2019-5211 issue affects Huawei P20 devices with Huawei Share prior to Emily-L29C 9.1.0.311, caused by improper file management during file transfers. The vulnerability could allow an attacker to cause deletion of files on the victim’s device after tricking the user into certain operations...

Huawei P20 File Mismanagement Vulnerability

Huawei P20 is a smartphone from Chinese company Huawei Huawei. A security vulnerability exists in the Huawei Share feature in Huawei P20, which stems from improper file management. An attacker can exploit the vulnerability by tricking a user into performing certain actions on his or her phone,...

Security Advisory - Improper File Management Vulnerability in Huawei Share

The Huawei Share function of some Huawei phones has an improper file management vulnerability. The attacker tricks the victim to perform certain operations on the mobile phone during file transfer. Because the file is not properly processed, successfully exploit may cause some files on the victim...

October 8, 2019—KB4520011 (OS Build 10240.18368)

None None...

Code Execution Vulnerability in UCMS Backend File Management

UCMS is a simple open source content management system. A code execution vulnerability exists in the UCMS backend file management, which can be exploited by an attacker to gain control of the web server...

Cisco Unity Connection libSRTP Denial of Service Vulnerability

A vulnerability in local file management for Cisco Unity Connection could allow an unauthenticated, remote attacker to cause high disk utilization, resulting in a denial of service DoS condition. The vulnerability occurs because a certain system log file does not have a maximum size restriction...

September 10, 2019—KB4516066 (OS Build 16299.1387)

None None...

CVE-2019-15524

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI...

Remote code execution

CSZ CMS 1.2.3 allows arbitrary file upload, as demonstrated by a .php file to admin/filemanager in the File Management Module, which leads to remote code execution by visiting a photo/upload/2019/ URI...

EulerOS 2.0 SP2 : bind (EulerOS-SA-2019-1730)

According to the version of the bind packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A flaw was found in the way bind implemented tunable which limited simultaneous TCP client connections. A remote attacker could use this flaw to...