9365 matches found
Hub: insecure galaxy-importer tarfile extraction
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
CVE-2023-49788
Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server richdocumentscode is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attac...
CVE-2023-49788: Trust Boundary Violation
Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server richdocumentscode is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attac...
CVE-2023-44306
Dell DM5500 exposes a path traversal vulnerability in the PPOE component that could allow a remote attacker with high privileges to overwrite configuration files on the server filesystem. The affected product is the Dell DM5500 appliance; the vulnerability arises from improper filtering of path e...
Dell DM5500 path traversal vulnerability
The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a path traversal vulnerability that stems from a failure to properly filter special elements in the path of a...
File Overwrite
libzfs.so is vulnerable to File Overwrite. The vulnerability is due to dnodeisdirty function in dnode.c because there are no checks for detailed modification records for the dnode, it's only checking the dn-dndirtylink array to determine if the dnode is dirty. This can leads to file contents bein...
SUSE SLES15: libnss_slurm2_23_02 / libpmi0_23_02 / libslurm39 / perl-slurm_23_02 / etc (SUSE-SU-2023:4564-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4564-1 advisory. - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entir...
CVE-2023-5299
A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system...
Information disclosure
A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system...
CVE-2023-5299 Fuji Electric Tellus Lite V-Simulator Improper Access Control
A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system...
CVE-2023-5299
Fuji Electric Tellus Lite V-Simulator is affected by an Improper Access Control vulnerability (CVE-2023-5299). A user with a standard account may overwrite files on the system, as documented in multiple sources. The issue is tied to local access permissions rather than remote exploitation, with m...
PT-2023-32553 · Nessus · Nessus
Name of the Vulnerable Software and Affected Versions: Nessus affected versions not specified Description: An issue exists where an authenticated attacker with privileges on the managing application could alter variables to overwrite arbitrary files on the remote host, potentially leading to a...
Nessus Buffer Error Vulnerability
Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. A security vulnerability exists in Nessus 10.6.2 and earlier versions that originated from a vulnerability that allows an attacker with administrator privileges to change Nessus rule...
Authentication flaw
An attacker can overwrite any file on the server hosting MLflow without any authentication...
CVE-2023-6018
An attacker can overwrite any file on the server hosting MLflow without any authentication...
CVE-2023-6018: Improper Neutralization of Special Elements used in an OS Command
An attacker can overwrite any file on the server hosting MLflow without any authentication...
Mlflow Security Vulnerabilities
Mlflow is an open source platform for machine learning lifecycle. Mlflow has a security vulnerability that stems from allowing an unauthorized attacker to overwrite any file on MLflow's servers...
Rockwell Automation Stratix Configuration Directive File Overwrite (CVE-2015-7703)
Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...
CVE-2023-5189
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...
UBUNTU-CVE-2023-5189
A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...