3458 matches found
Directory traversal
CoreFTP Server before 727 allows directory traversal for file creation by an authenticated attacker via ../ in an HTTP PUT request...
Core FTP 路径遍历漏洞
Core FTP is a file transfer server. A security vulnerability previously existed in Core FTP Server 727 that allowed an authenticated attacker to perform directory traversal for file creation in an HTTP PUT request via . / for directory traversal for file creation...
CVE-2022-22836
CoreFTP Server before 727 allows directory traversal for file creation by an authenticated attacker via ../ in an HTTP PUT request...
CVE-2021-39970
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
CVE-2021-39970
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
CVE-2021-39970
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
Input validation
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
CVE-2021-39970
HwPCAssistant has a Improper Input Validation vulnerability.Successful exploitation of this vulnerability may create any file with the system app permission...
PT-2025-8224
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A potential deadlock issue has been identified in the Linux kernel related to the Ceph file system. The issue occurs when a file is created with O RDWR and a request is sent to the...
The vulnerability of the configuration management system and the remote execution feature of SaltStack Salt allow a perpetrator to temporarily increase their privileges locally.
The vulnerability of the Configuration Management system and the remote execution of operations in SaltStack Salt is related to the check for rebooting minions. Exploiting this vulnerability could allow an attacker who has the ability to create files in the directory to locally escalate their...
The vulnerability of the Jenkins automation server, related to incorrect authentication procedures, allows attackers to create arbitrary files.
The vulnerability of the Jenkins automation server is related to an incorrect authentication process. Exploiting this vulnerability allows a malicious actor to remotely create arbitrary files...
The vulnerability of the TwinCAT OPC UA Server lies in errors in processing the relative path to the directory. This allows attackers to create and delete arbitrary files within the system.
The vulnerability of the TwinCAT OPC UA Server is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to create and delete arbitrary files within the system...
The vulnerability of the ZipArchive::extractTo function in the PHP interpreter allows a attacker to create or overwrite files.
The vulnerability of the ZipArchive::extractTo function in the PHP interpreter exists due to an incorrect limitation on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to create or re-record files remotely...
openSUSE 15 Security Update : nodejs12 (openSUSE-SU-2021:1574-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:1574-1 advisory. - The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS ...
OPENSUSE-SU-2021:1574-1 Security update for nodejs12
This update for nodejs12 fixes the following issues: - CVE-2021-22959: Fixed HTTP Request Smuggling due to spaced in headers bsc1191601. - CVE-2021-22960: Fixed HTTP Request Smuggling when parsing the body bsc1191602. - CVE-2021-37701: Fixed arbitrary file creation and overwrite in nodejs-tar...
Security update for nodejs12 (important)
openSUSE Security Update: Security update for nodejs12 Announcement ID: openSUSE-SU-2021:1574-1 Rating: important References: 1190053 1190054 1190055 1190056 1190057 1191601 1191602 Cross-References: CVE-2021-22959 CVE-2021-22960 CVE-2021-37701 CVE-2021-37712 CVE-2021-37713 CVE-2021-39134...
openSUSE 15 Security Update : nodejs14 (openSUSE-SU-2021:3964-1)
The remote SUSE Linux SUSE15 host has packages installed that are affected by multiple vulnerabilities as referenced in the openSUSE-SU-2021:3964-1 advisory. - The parser in accepts requests with a space SP right after the header name before the colon. This can lead to HTTP Request Smuggling HRS ...
SUSE SLES15 Security Update : nodejs14 (SUSE-SU-2021:3964-1)
The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2021:3964-1 advisory. nodejs14 was updated to 14.18.1: deps: update llhttp to 2.1.4 - HTTP Request Smuggling due to spaced in headers bsc1191601, CVE-2021-22959 - HT...