4364 matches found
CVE-2024-7236: Improper Link Resolution Before File Access
AVG AntiVirus Free icarus Arbitrary File Creation Denial of Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition on affected installations of AVG AntiVirus Free. An attacker must first obtain the ability to execute low-privileged code on the...
CVE-2024-7243: Improper Link Resolution Before File Access
Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...
CVE-2024-7241: Improper Link Resolution Before File Access
Panda Security Dome Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Dome. An attacker must first obtain the ability to execute low-privileged code on the target system in order to...
CVE-2020-26071 Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service DoS condition. The vulnerability is due to insufficient input validation for specific commands. ...
CVE-2020-26071 Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service DoS condition. The vulnerability is due to insufficient input validation for specific commands. ...
CVE-2020-26071: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service DoS condition. The vulnerability is due to insufficient input validation for specific commands. ...
The vulnerability of Siemens SINEC Security Monitor, a network security monitoring application, arises from an improper restriction on the path name to the restricted directories. This allows attackers to create files in arbitrary directories.
The vulnerability of the Siemens SINEC Security Monitor network security monitoring application is related to an incorrect restriction on the path name to the restricted directories. Exploiting this vulnerability could allow a malicious actor to create files in arbitrary directories remotely...
CVE-2024-10629
The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2024-10629
CVE-2024-10629 affects the GPX Viewer WordPress plugin (versions up to 2.2.8; later references show 2.2.9 patch). The vulnerability is arbitrary file creation due to missing capability checks and file type validation in gpxv_file_upload(). Authenticated attackers with subscriber-level access or h...
CVE-2024-10629 GPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation
The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with subscriber-level access and...
CVE-2024-10629 GPX Viewer <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation
The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with subscriber-level access and...
PT-2024-33541 · Opensuse · Tumbleweed
Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue involves the insecure creation of temporary files, which can be exploited by local users on systems with non-default configurations. This can...
CVE-2024-10629: Missing Authorization
The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxvfileupload function in all versions up to, and including, 2.2.9. This makes it possible for authenticated attackers, with subscriber-level access and...
WordPress GPX Viewer plugin <= 2.2.9 - Authenticated (Subscriber+) Arbitrary File Creation vulnerability
Authenticated Subscriber+ Arbitrary File Creation vulnerability discovered by Francesco Carlucci in WordPress Plugin GPX Viewer versions = 2.2.9...
Exploit for CVE-2024-10629
CVE-2024-10629 GPX Viewer = 2.2.8 - Authenticated Subscri...
SQL Injection in default_jsonalyzer via prompt injection leads to arbitrary file creation
Target Link Description defaultjsonalyzer function used in JSONalyzeQueryEngine execute a sqlite query that llm made. If the attacker control the sqlite query with prompt injection and execute a malicious sqlite query, then Denial-of-Service attack and arbitrary file creation is possible. Root...
Arbitrary File Creation
github.com/nvidia/nvidia-container-toolkit is vulnerable to arbitrary file creation. The vulnerability is due to the default mode of operation, which allows a specially crafted container image to interact with the host file system and create empty files...
Path traversal vulnerability leading to file creation
...
PT-2024-16422
Name of the Vulnerable Software and Affected Versions GPX Viewer plugin for WordPress versions up to, and including, 2.2.8 Description The GPX Viewer plugin for WordPress is vulnerable to arbitrary file creation due to a missing capability check and file type validation in the gpxv file upload...