Lucene search
K

6819 matches found

Cvelist
Cvelist
added 2025/05/07 5:18 p.m.15 views

CVE-2025-20213 Cisco Catalyst SDWAN Manager Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials...

5.5CVSS0.00078EPSS
Exploits0References1
Cisco
Cisco
added 2025/05/07 4:0 p.m.15 views

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. To exploit this vulnerability, the attacker must have valid read-only credentials...

5.5CVSS5.7AI score0.00078EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/05/07 12:0 a.m.1 views

Cisco Catalyst SD-WAN Manager 操作系统命令注入漏洞

Cisco Catalyst SD-WAN Manager Cisco SD-WAN vManage is a highly customizable dashboard from Cisco, Inc. that simplifies and automates the deployment, configuration, management, and operation of Cisco SD-WAN. An operating system command injection vulnerability exists in Cisco Catalyst SD-WAN Manage...

5.5CVSS7.2AI score0.00078EPSS
Exploits0References1
Tenable Nessus
Tenable Nessus
added 2025/05/07 12:0 a.m.3 views

Cisco Catalyst SD-WAN Manager Arbitrary File Overwrite (cisco-sa-sdwan-fileoverwrite-Uc9tXWH)

According to its self-reported version, Cisco SD-WAN Viptela Software is affected by a vulnerability. - A vulnerability in the CLI of Cisco Catalyst SD-WAN Manager, formerly Cisco SD-WAN vManage, could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of...

5.5CVSS5.9AI score0.00078EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2025/05/04 8:12 p.m.14 views

CVE-2025-0782

A vulnerability in the S3 bucket configuration for h2oai/h2o-3 allows public write access to the 'h2o-release' bucket. This issue affects all versions and could enable an attacker to overwrite any file in the bucket. As users download binary files such as JARs from this bucket, this vulnerability...

7.8AI score
Exploits0References4
NVD
NVD
added 2025/05/02 9:15 p.m.16 views

CVE-2025-0782

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...

Exploits0
CVE
CVE
added 2025/05/02 8:11 p.m.61 views

CVE-2025-0782

CVE-2025-0782 is tied to a vulnerability in the S3 bucket configuration used by h2oai/h2o-3, where public write access to the bucket named “h2o-release” could allow an attacker to overwrite any file and potentially enable remote code execution for users downloading binaries. The primary exploit v...

9.7AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/05/01 12:0 a.m.5 views

JetBrains Rider < 2025.1.2 Arbitrary File Overwrite

The version of JetBrains Rider installed on the remote host is prior to 2025.1.2. It is, therefore, affected by a vulnerability as referenced in the TeamCity202504 advisory. - In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

7.5CVSS5.7AI score0.00002EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/04/30 11:11 p.m.17 views

CVE-2025-46328

snowflake-connector-nodejs is a NodeJS driver for Snowflake. Versions starting from 1.10.0 to before 2.0.4, are vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition. When using the Easy Logging feature on Linux and macOS the Driver reads logging configuration from a user-provided...

7CVSS6.8AI score0.00027EPSS
Exploits0References1
CNVD
CNVD
added 2025/04/30 12:0 a.m.4 views

Unspecified Vulnerability in JetBrains Rider

JetBrains Rider is a cross-platform .NET integrated development environment IDE from the Czech company JetBrains. A security vulnerability exists in JetBrains Rider that stems from a custom archive unpacker allowing arbitrary file overwrites during a remote debugging session, which can be exploit...

7.5CVSS6.4AI score0.00002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/27 3:4 p.m.17 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

5.4CVSS7.5AI score0.00002EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/04/26 5:49 a.m.7 views

CVE-2025-32817

A Improper Link Resolution vulnerability CWE-59 in the SonicWall Connect Tunnel Windows 32 and 64 bit client, this results in unauthorized file overwrite, potentially leading to denial of service or file corruption...

6.1CVSS6.7AI score0.00096EPSS
Exploits0References3
OSV
OSV
added 2025/04/25 3:15 p.m.2 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

7.5CVSS5.9AI score0.00002EPSS
Exploits0References1
NVD
NVD
added 2025/04/25 3:15 p.m.8 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

7.5CVSS0.00002EPSS
Exploits0References1
CVE
CVE
added 2025/04/25 2:32 p.m.53 views

CVE-2025-43016

CVE-2025-43016 affects JetBrains Rider prior to 2025.1.2. Multiple sources describe a vulnerability in Rider’s custom archive unpacker that enables arbitrary file overwrites during a remote debugging session. Impact is described as arbitrary file overwrite with no explicit exploitation details be...

7.5CVSS7.2AI score0.00002EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2025/04/25 2:32 p.m.11 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

5.4CVSS0.00002EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/04/25 2:32 p.m.5 views

CVE-2025-43016

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session...

5.4CVSS7.4AI score0.00002EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/04/25 12:0 a.m.4 views

PT-2025-17922 · Jetbrains · Jetbrains Rider

Name of the Vulnerable Software and Affected Versions: JetBrains Rider versions prior to 2025.1.2 Description: The issue allows arbitrary file overwrite during a remote debug session due to a custom archive unpacker. Recommendations: For versions prior to 2025.1.2, update to version 2025.1.2 or...

5.5CVSS6.6AI score0.00002EPSS
Exploits0References6
SUSE CVE
SUSE CVE
added 2025/04/24 3:35 a.m.1 views

SUSE CVE-2019-15119

lib/install/install.go in cnlh nps through 0.23.2 uses 0777 permissions for /usr/local/bin/nps and/or /usr/bin/nps, leading to a file overwrite by a local user...

5.5CVSS6.7AI score0.00229EPSS
Exploits1References3
OSV
OSV
added 2025/04/22 6:14 p.m.4 views

GO-2025-3625 cnlh nps vulnerable to file overwrite by local user in github.com/cnlh/nps

cnlh nps vulnerable to file overwrite by local user in github.com/cnlh/nps...

5.8CVSS6.5AI score0.00229EPSS
Exploits1References4
Rows per page
Query Builder