NewStart CGSL CORE 5.05 / MAIN 5.05 : okular Vulnerability (NS-SA-2020-0115)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has okular packages installed that are affected by a vulnerability: - okular version 18.08 and earlier contains a Directory Traversal vulnerability in function unpackDocumentArchive... in core/document.cpp that can result in...

Authentication Bypass

sddm is vulnerable to authentication bypass. The X server allows unprivileged users to create a connection to the server without authentication due to an incorrect start and race condition during Xauthority file creation...

Cisco SD-WAN Software Arbitrary File Creation (cisco-sa-vsoln-arbfile-gtsEYxns)

According to its self-reported version, Cisco SD-WAN Software is affected by an arbitrary file creation vulnerability due to insufficient input validation for specific commands. An authenticated, local attacker can exploit this, by including crafted arguments to the vulnerable commands, to create...

Citrix RDSWatcher

Description RDSWatcher is an advanced Remote Desktop Services session state monitor and logger. It watches all sessions on any Windows machine and logs all session state changes with time stamp as accurately as twice a second. RDSWatcher provides the connection status of current sessions and is...

CVE-2020-27128 Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability

A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system. The vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by...

CVE-2020-27128 Cisco SD-WAN vManage Software Arbitrary File Creation Vulnerability

A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an affected system. The vulnerability is due to improper validation of requests to APIs. An attacker could exploit this vulnerability by...

Cisco Zero-Day in AnyConnect Secure Mobility Client Remains Unpatched

Cisco has disclosed a zero-day vulnerability – for which there is not yet a patch – in the Windows, macOS and Linux versions of its AnyConnect Secure Mobility Client Software. While Cisco said it is not aware of any exploits in the wild for the vulnerability, it said Proof-of-Concept PoC exploit...

USN-3081-2 tomcat6 vulnerability

Dawid Golunski discovered that the Tomcat init script incorrectly handled creating log files. A remote attacker could possibly use this issue to obtain root privileges...

CVE-2020-16910

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

Security feature bypass

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

CVE-2020-16910: Improper Preservation of Permissions

A security feature bypass vulnerability exists when Microsoft Windows fails to handle file creation permissions, which could allow an attacker to create files in a protected Unified Extensible Firmware Interface UEFI location. To exploit this vulnerability, an attacker could run a specially craft...

Microsoft Windows and Windows Server Security Feature Bypass Vulnerability (CNVD-2021-08828)

Microsoft Windows and Microsoft Windows Server are both products of Microsoft Corporation.Microsoft Windows is an operating system for personal devices.Microsoft Windows Server is a server operating system. A security feature bypass vulnerability exists in Microsoft Windows and Windows Server. Th...

The vulnerability of the CAMS for HIS distributed control systems’ emergency message and event management components allows attackers to create or re-record arbitrary files and execute arbitrary commands through unspecified vectors.

The vulnerability of the CAMS for HIS distributed control systems’ emergency message and event management component is related to deficiencies in checking the path name to the restricted-access catalog. Exploiting this vulnerability could allow an attacker to create or re-record arbitrary files a...

CVE-2020-25744: Improper Link Resolution Before File Access

SaferVPN before 5.0.3.3 on Windows could allow low-privileged users to create or overwrite arbitrary files, which could cause a denial of service DoS condition, because a symlink from %LOCALAPPDATA%\SaferVPN\Log is followed...

PT-2020-16181

Name of the Vulnerable Software and Affected Versions SaferVPN versions prior to 5.0.3.3 Description The issue allows low-privileged users to create or overwrite arbitrary files, potentially causing a denial of service DoS condition. This is because a symlink from %LOCALAPPDATA%SaferVPNLog is...

CVE-2020-1159

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

CVE-2020-1159

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

Privilege escalation

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

CVE-2020-1159: Undefined Security Weakness

An elevation of privilege vulnerability exists in the way that the StartTileData.dll handles file creation in protected locations. An attacker who successfully exploited the vulnerability could execute code with elevated permissions. To exploit the vulnerability, a locally authenticated attacker...

PT-2020-21316

Name of the Vulnerable Software and Affected Versions bin-links versions prior to 1.1.5 Description The issue allows attackers to create arbitrary files in the system through the bin field, due to a failure to restrict access to folders outside of the intended node modules folder. It is not...