Path traversal

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors...

CVE-2021-29091

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors...

CVE-2021-29091

The vulnerability CVE-2021-29091 affects Synology Photo Station prior to 6.8.14-3500. It is a Path Traversal in the file management component that improperly limits the destination path, allowing remote authenticated users to write arbitrary files via unspecified vectors. Impact is information ab...

PT-2021-18079

Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.14-3500 Description: The issue is related to a Path Traversal vulnerability in the file management component. This allows remote authenticated users to write arbitrary files via unspecified vectors...

CVE-2021-29091: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors...

CVE-2021-29092

Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-29092

Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-29092

The CVE-2021-29092 issue affects Synology Photo Station (pre-6.8.14-3500). The vulnerability is described as an unrestricted upload of a file with a dangerous type in the file management component, which could allow remote authenticated users to execute arbitrary code via unspecified vectors. Aff...

CVE-2021-29092: Unrestricted Upload of File with Dangerous Type

Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors...

PT-2021-18080

Name of the Vulnerable Software and Affected Versions: Synology Photo Station versions prior to 6.8.14-3500 Description: The issue allows remote authenticated users to execute arbitrary code via unspecified vectors due to an unrestricted upload of file with dangerous type vulnerability in the fil...

SQL Injection Vulnerability in Purple Electronic File Management System

hereinafter referred to as "Ziguang Software" is a leading provider of industry solutions and IT services in China. A SQL injection vulnerability exists in the Ziguang Electronic File Management System. The vulnerability can be exploited by an attacker to obtain sensitive information from the...

Insecure Access Control

octoprint uses an insecure access control. The vulnerability exists as it attempts to manage files other than .log...

Improper access control

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

CVE-2021-32560

The Logging subsystem in OctoPrint before 1.6.0 has incorrect access control because it attempts to manage files that are not .log files...

SQL Injection Vulnerability in Purple File Management System of Purple Software Systems Ltd (CNVD-2021-35784)

Purple Software Systems Ltd. is a company that specializes in making a chain of cloud file management services. A SQL injection vulnerability exists in the Purple File Management System of Purple Software Systems Limited, which can be exploited by attackers to obtain sensitive information from th...

Cisco NX-OS Software Unauthenticated Arbitrary File Actions Vulnerability (cisco-sa-3000-9000-fileaction-QtLzDRy2)

According to its self-reported version, Cisco NX-OS Software for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode are affected by a vulnerability in the implementation of an internal file management service. An unauthenticated, remote attacker could...

SQL Injection Vulnerability in Purple File Management System of Purple Software Systems Ltd.

Purple Software Systems Ltd. is a company that specializes in making a chain of cloud file management services. Purple Software Systems Limited Purple File Management System suffers from a SQL injection vulnerability, which can be exploited by an attacker to obtain sensitive information from the...

Cisco NX-OS File Rewrite

The vulnerability of the internal file management service in the Cisco NX-OS operating system for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches lies in the use of files and directories accessible from external parties. Exploiting this vulnerability allows a malicious actor...

CVE-2021-1361

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite...

Information disclosure

A vulnerability in the implementation of an internal file management service for Cisco Nexus 3000 Series Switches and Cisco Nexus 9000 Series Switches in standalone NX-OS mode that are running Cisco NX-OS Software could allow an unauthenticated, remote attacker to create, delete, or overwrite...