CVE-2023-43074

Dell Unity 5.3 is affected by an Arbitrary File Creation vulnerability. The root cause is a flaw that allows a remote unauthenticated attacker to craft arbitrary files via a request to the server, enabling potential file creation on the appliance. The issue is actionable with the information prov...

CVE-2023-43074

Dell Unity 5.3 contains an Arbitrary File Creation vulnerability. A remote unauthenticated attacker could potentially exploit this vulnerability by crafting arbitrary files through a request to the server...

PT-2023-28684 · Dell · Dell Unity

Name of the Vulnerable Software and Affected Versions: Dell Unity version 5.3 Description: A remote unauthenticated attacker could potentially exploit this vulnerability by crafting arbitrary files through a request to the server. The issue is related to an Arbitrary File Creation vulnerability...

Ubuntu 18.04 ESM : Okular vulnerability (USN-4830-1)

The remote Ubuntu 18.04 ESM host has packages installed that are affected by a vulnerability as referenced in the USN-4830-1 advisory. It was discovered that Okular mishandled certain crafted archives during extraction. An attacker could use this vulnerability to write arbitrary files to the...

Ubuntu 20.04 ESM : Tar for Node.js vulnerability (USN-5283-1)

The remote Ubuntu 20.04 ESM host has a package installed that is affected by a vulnerability as referenced in the USN-5283-1 advisory. It was discovered that Tar for Node.js did not properly sanitize path inputs. An attacker could possibly use this issue to read arbitrary files, resulting in a...

Ubuntu 16.04 ESM : Salt vulnerabilities (USN-4769-1)

The remote Ubuntu 16.04 ESM host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4769-1 advisory. It was discovered that Salt allowed remote attackers to write to arbitrary files via a special crafted file. An attacker could use this vulnerability to...

CVE-2023-4666

CVE-2023-4666 affects the Form Maker by 10Web WordPress plugin (before 1.15.20). The vulnerability arises because the plugin does not validate signatures when creating them on the server from user input, allowing unauthenticated users to upload arbitrary files and potentially achieve remote code ...

PT-2023-30146

Name of the Vulnerable Software and Affected Versions The Form Maker by 10Web WordPress plugin versions prior to 1.15.20 Description The issue allows unauthenticated users to create arbitrary files on the server from user input due to a lack of signature validation, potentially leading to remote...

CVE-2023-45353

Atos Unify OpenScape Common Management Portal V10 before V10 R4.17.0 and V10 R5.1.0 allows an authenticated attacker to execute arbitrary code on the operating system by leveraging the Common Management Portal web interface for Authenticated remote upload and creation of arbitrary files affecting...

Atos Unify OpenScape Code Issue Vulnerability

Atos Unify OpenScape is a native SIP-based real-time Voice over IP system from Atos Unify. A security vulnerability exists in Atos Unify OpenScape that originates from the execution of arbitrary code on the operating system through authenticated remote uploads via the common management portal web...

SUSE CVE-2023-37460

Plexis Archiver is a collection of Plexus components to create archives or extract archives to a directory with a unified Archiver/UnArchiver API. Prior to version 4.8.0, using AbstractUnArchiver for extracting an archive might lead to an arbitrary file creation and possibly remote code execution...

CVE-2023-37460

A flaw was found in the Plexus Archiver. While using AbstractUnArchiver for extracting, an archive might lead to arbitrary file creation and possible remote code execution RCE. Extracting an archive with an entry in the destination directory as a symbolic link whose target does not exist will...

The vulnerability in component IW44Image.cpp of the viewer library for creating and editing DjVu files allows a perpetrator to cause a service failure.

The vulnerability of component IW44Image.cpp in the viewer, editor, and DjVu-file creation library from DjVuLibre is related to the lack of checks for division by zero. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of Apache Superset’s data visualization software lies in insufficient validation of input data. This allows attackers to create arbitrary files and gain unauthorized access to protected information.

The vulnerability of Apache Superset’s data visualization software relates to the use of alternative driver names during database import. Exploiting this vulnerability allows an attacker to create arbitrary files and gain unauthorized access to protected information by connecting to SQLite...

The vulnerability of the command-line interface of the Cisco operating system FX-OS in Cisco Firepower 1000, Firepower 2100, Firepower 4100, and Firepower 9300 Security Appliances allows a attacker to create or overwrite any file in the file system.

The vulnerability of the command-line interface of the Cisco operating system, Cisco FX-OS, in Cisco Firepower 1000, Firepower 2100, Firepower 4100, and Firepower 9300 Security Appliances, as well as the Secure Firewall 3100 Series, is related to the improper assignment of permissions for a...

Improper Input Validation

apache-superset is vulnerable to Improper Input Validation. The vulnerability allows an attacker to trick a user into potentially registering a SQLite database connection incorrectly if an attacker employs alternative driver names such as sqlite+pysqlite or utilizes database imports. This...

Security Bulletin: Due to use of, IBM Application Performance Management is vulnerable to a local authenticated attacker to obtain sensitive information.

Summary Google Guava is used within IBM Application Performance Management. CVE-2023-2976. Vulnerability Details CVEID:CVE-2023-2976 DESCRIPTION: Google Guava could allow a local authenticated attacker to obtain sensitive information, caused by a flaw with using Java's default temporary directory...

VulnCheck KEV: CVE-2023-4666

The Form Maker by 10Web WordPress plugin before 1.15.20 does not validate signatures when creating them on the server from user input, allowing unauthenticated users to create arbitrary files and lead to RCE...

Oracle Linux 7 : okular (ELSA-2020-1173)

The remote Oracle Linux 7 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2020-1173 advisory. 4.10.5-8 - Fix path traversal issue when extracting an .okular file Resolves: bz1634726 Tenable has extracted the preceding description block directly from the...

GHSA-FM4Q-J8G4-C9J4 Apache Superset Improper Input Validation vulnerability

Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...