Trend Micro Control Manager modDLPTemplateMatch_drildown Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Trend Micro Control Manager. Authentication is not required to exploit this vulnerability. The specific flaw exists within widgetold's modDLPTemplateMatchdrildown.php script. The issue lies in the...

The vulnerability of the QEMU hardware emulation software, which allows a hacker to trigger a service failure

The vulnerability of the hw/9pfs/9p.c function in the FileOperations service of the QEMU hardware emulation software is related to a memory leak. Exploiting this vulnerability allows an attacker, who operates locally and is also a user of the guest operating system, to cause a service failure suc...

Brocade Network Advisor CliMonitorReportServlet Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Brocade Network Advisor. Authentication is not required to exploit this vulnerability. The specific flaw exists within the CliMonitorReportsServlet servlet. The issue results from the lack ...

Android maxdsm Driver Kernel Information Disclosure Vulnerability

Exploit for Android platform in category local exploits Android: Kernel information disclosure in "maxdsmread" The "maxdsm" driver exposes several character devices which can be used to control and calibrate the device. One such device is the "control device", exposed under: "/dev/dsmctrldev". Th...

Attachmate Host Access Management and Security Server PassThru Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Attachmate Host Access Management and Security Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the PassThru resource. The issue results...

Advantech SUSIAccess Server downloadCSV file Parameter Directory Traversal Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on vulnerable installations of Advantech SUSIAccess Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within processing of downloadCSV.jsp. When parsing the file element, the...

Design/Logic Flaw

SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service program crash via an invalid file name in an archive file, aka SAP Security Note 2312905...

CVE-2016-5845

SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service program crash via an invalid file name in an archive file, aka SAP Security Note 2312905...

CVE-2016-5845: Undefined Security Weakness

SAP SAPCAR does not check the return value of file operations when extracting files, which allows remote attackers to cause a denial of service program crash via an invalid file name in an archive file, aka SAP Security Note 2312905...

CentOS Update for ImageMagick CESA-2016:0726 centos7

Check the version of ImageMagick SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882484";...

RedHat Update for ImageMagick RHSA-2016:0726-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

ImageMagick security update

CentOS Errata and Security Advisory CESA-2016:0726 An update for ImageMagick is now available for Red Hat Enterprise Linux 6 and Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base...

Ubuntu 14.04 LTS : Exim vulnerabilities (USN-2933-1)

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2933-1 advisory. It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was...

USN-2933-1 exim4 vulnerabilities

It was discovered that Exim incorrectly filtered environment variables when used with the perlstartup configuration option. If the perlstartup option was enabled, a local attacker could use this issue to escalate their privileges to the root user. This issue has been fixed by having Exim clean th...

[SECURITY] Fedora 20 Update: ntfs-3g-2015.3.14-2.fc20

NTFS-3G is a stable, open source, GPL licensed, POSIX, read/write NTFS driver for Linux and many other operating systems. It provides safe handling of the Windows XP, Windows Server 2003, Windows 2000, Windows Vista, Windows Server 2008 and Windows 7 NTFS file systems. NTFS-3G can create, remove,...

OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities

Exploit for multiple platform in category web applications Document Title: =============== OYO File Manager 1.1 iOS&Android - Multiple Vulnerabilities Product & Service Introduction: =============================== OYO File Manager, helps you to manage files in your mobile from your computer over...

Media File Manager Advanced <= 1.1.5 - Multiple Vulnerabilites

Media File Manager Advanced suffers from executing administrator actions by any authenticated user due to weak permissions checking. An attacker is able to delete/update posts, Creating/Removing/Listing Directories, Moving/Renaming/Deleting Files, Blind SQL Injection and Cross-Site Scripting. PoC...

CVE-2014-7822

The implementation of certain splicewrite file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service system crash or possibly have unspecified other impact via a crafted splice system...

Information disclosure

The implementation of certain splicewrite file operations in the Linux kernel before 3.16 does not enforce a restriction on the maximum size of a single file, which allows local users to cause a denial of service system crash or possibly have unspecified other impact via a crafted splice system...

PT-2014-2030

Name of the Vulnerable Software and Affected Versions Yokogawa CENTUM CS 3000 versions through R3.09.50 Yokogawa CENTUM VP versions through R4.03.00 Yokogawa CENTUM VP versions R5.x through R5.04.00 Yokogawa Exaopc versions through R3.72.10 Description The issue is related to insufficient access...