9356 matches found
CVE-2024-34033
Delta Electronics DIAEnergie has insufficient input validation which makes it possible to perform a path traversal attack and write outside of the intended directory. If a file name is specified that already exists on the file system, then the original file will be overwritten...
CVE-2024-34033
Delta Electronics DIAEnergie is affected by a Path Traversal (CWE-22) due to insufficient input validation, allowing an attacker to write files outside the intended directory. Public references indicate affected DIAEnergie versions include v1.10.00.005, with remediation available in v1.10.01.004....
CVE-2024-28072: Insertion of Sensitive Information into Log File
A highly privileged account can overwrite arbitrary files on the system with log output. The log file path tags were not sanitized properly...
PT-2024-22252 · Solarwinds · Serv-U Ftp Server
Name of the Vulnerable Software and Affected Versions: Serv-U FTP server affected versions not specified Description: A highly privileged account can overwrite arbitrary files on the system with log output due to improper sanitization of log file path tags. Recommendations: At the moment, there i...
PT-2024-5051 · Unknown · Reposilite
Name of the Vulnerable Software and Affected Versions: Reposilite versions prior to 3.5.12 Description: The issue is related to the expansion of Javadoc archives in Reposilite, where the file.name taken from the archive can contain path traversal characters, allowing an attacker to overwrite any...
CVE-2023-41971
An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...
CVE-2024-23459
An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...
CVE-2024-23459
An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...
CVE-2023-41971
An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...
CVE-2023-41971 Windows ZCC Upgrade DoS And Privilege Escalation Through RPC Control
An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...
PT-2024-13024
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Windows versions prior to 3.7 Description An Improper Link Resolution Before File Access 'Link Following' issue allows a system file to be overwritten. Recommendations For versions prior to 3.7, update to version 3....
CVE-2024-23459: Improper Link Resolution Before File Access
An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten.This issue affects Zscaler Client Connector on Mac : before 3.7...
CVE-2023-41971: Improper Link Resolution Before File Access
An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Windows allows a system file to be overwritten.This issue affects Client Connector on Windows: before 3.7...
PT-2024-19881
Name of the Vulnerable Software and Affected Versions Zscaler Client Connector on Mac versions prior to 3.7 Description An Improper Link Resolution Before File Access 'Link Following' vulnerability in Zscaler Client Connector on Mac allows a system file to be overwritten. Recommendations For...
PT-2024-27570 · Scadapro · Scadapro
Name of the Vulnerable Software and Affected Versions: ScadaPro affected versions not specified Description: The entire parent directory - C:ScadaPro and its sub-directories and files are configured by default to allow users, including unprivileged users, to write or overwrite files...
CVE-2023-50915
The GOG Galaxy (Beta) game client (versions 2.0.67.2 through 2.0.71.2 ) contains a vulnerability in GalaxyClientService.exe . This issue stems from improper file handling where the privileged service writes logs as NT AUTHORITY/SYSTEM into a directory where standard users possess read, write, and...
RHEL 6 / 7 : rh-ruby24-ruby (RHSA-2017:3485)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2017:3485 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
RHEL 6 / 7 : rh-ruby23-ruby (RHSA-2018:0585)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0585 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
RHEL 6 / 7 : rh-ruby22-ruby (RHSA-2018:0583)
The remote Redhat Enterprise Linux 6 / 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2018:0583 advisory. Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text files and to perform system...
