Path traversal

A path traversal exists in a specific service dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files...

CVE-2023-32522

A path traversal exists in a specific dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

CVE-2023-32522

CVE-2023-32522 – Trend Micro Mobile Security (Enterprise) 9.8 SP5 path traversal . Affected software: Trend Micro Mobile Security (Enterprise) 9.8 SP5. Issue: a path traversal exists in a specific DLL that could let an authenticated remote attacker delete arbitrary files. Root cause: untrusted pa...

CVE-2023-32521

A path traversal exists in a specific service dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files...

CVE-2023-32521

A path traversal exists in a specific service dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files...

CVE-2023-32521

CVE-2023-32521 – Path traversal in Trend Micro Mobile Security (Enterprise) 9.8 SP5 . A path traversal vulnerability exists in a specific service dll that could allow an unauthenticated remote attacker to delete arbitrary files. Affected product is Trend Micro Mobile Security for Enterprise (vers...

CVE-2023-32521: Improper Limitation of a Pathname to a Restricted Directory

A path traversal exists in a specific service dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an unauthenticated remote attacker to delete arbitrary files...

PT-2023-23853

Name of the Vulnerable Software and Affected Versions Trend Micro Mobile Security Enterprise version 9.8 SP5 Description A path traversal issue exists in a specific dll, allowing an authenticated remote attacker to delete arbitrary files. The attacker must first obtain the ability to execute...

CVE-2023-32522: Improper Limitation of a Pathname to a Restricted Directory

A path traversal exists in a specific dll of Trend Micro Mobile Security Enterprise 9.8 SP5 which could allow an authenticated remote attacker to delete arbitrary files. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit...

WordPress Ninja Forms Plugin <= 3.6.24 is vulnerable to Arbitrary File Deletion

Software Ninja Forms Type Plugin Vulnerable versions = 3.6.24 Fixed in 3.6.25 OWASP Top 10 A6: Security Misconfiguration Classification Arbitrary File Deletion CVE CVE-2023-36505 Patch priority Low CVSS severity Low 6.8 Developer Claim ownership PSID 711180726eeb Credits Theodoros Malachias...

CVE-2022-46850

Auth. author+ Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin = 0.1.3 versions...

CVE-2022-46850

Auth. author+ Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin = 0.1.3 versions...

Improper access control

Auth. author+ Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin = 0.1.3 versions...

CVE-2022-46850 WordPress Easy Media Replace Plugin <= 0.1.3 is vulnerable to Arbitrary File Deletion

Auth. author+ Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin = 0.1.3 versions...

CVE-2022-46850 WordPress Easy Media Replace Plugin <= 0.1.3 is vulnerable to Arbitrary File Deletion

Auth. author+ Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin = 0.1.3 versions...

CVE-2022-46850

CVE-2022-46850 affects the WordPress plugin Easy Media Replace (versions

CVE-2022-46850

Auth. author+ Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin = 0.1.3 versions...

WordPress plugin Easy Media Replace 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

PT-2023-15075 · WordPress · Easy Media Replace

Name of the Vulnerable Software and Affected Versions: Easy Media Replace plugin versions prior to 0.1.4 Description: The issue is related to Broken Access Control, allowing Arbitrary File Deletion. Recommendations: For Easy Media Replace plugin versions prior to 0.1.4, update to version 0.1.4 or...

CVE-2022-46850: Missing Authorization

Auth. author+ Broken Access Control vulnerability leading to Arbitrary File Deletion in Nabil Lemsieh Easy Media Replace plugin = 0.1.3 versions...