CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

CVE-2023-28600

Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client files potentially causing a loss of integrity and availability to the Zoom Client...

CVE-2023-28603

Zoom VDI client installer prior to 5.14.0 contains an improper access control vulnerability. A malicious user may potentially delete local files without proper permissions...

File Permission Bypass

libarchive.so is vulnerable to File Permission Bypass. The vulnerability exists due to a race condition in archivewritediskheader function at archivewritediskposix.c because the unmasking process does not take intro consideration other threads working on the same file, which allows an attacker to...

Zoom VDI client installer 安全漏洞

Zoom VDI client installer is a client installer from Zoom USA. A security vulnerability exists in Zoom VDI client installer versions prior to 5.14.0 that stems from incorrect access control. An attacker can exploit the vulnerability to delete local files without proper privileges...

PT-2023-21840 · Zoom · Zoom Vdi Client

Name of the Vulnerable Software and Affected Versions: Zoom VDI client installer versions prior to 5.14.0 Description: The issue is related to improper access control, allowing a malicious user to potentially delete local files without proper permissions. Recommendations: For versions prior to...

Zoom Client 安全漏洞

Zoom Client is a video conferencing client application from Zoom USA that supports multiple platforms. A security vulnerability exists in Zoom for MacOS clients versions prior to 5.14.0 that stems from improper access control. An attacker exploiting this vulnerability could delete or replace Zoom...

PT-2023-21839 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for MacOS versions prior to 5.14.0 Description: The issue is related to improper access control, which could allow a malicious user to delete or replace Zoom Client files. This could potentially cause a loss of integrity and availability...

Zoom Client for Meetings < 5.14.0 Vulnerability (ZSB-23008)

The version of Zoom Client for Meetings installed on the remote host is prior to 5.14.0. It is, therefore, affected by a vulnerability as referenced in the ZSB-23008 advisory. - Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to...

CVE-2023-0292 Quiz And Survey Master <= 8.0.8 - Cross-Site Request Forgery to Arbitrary Media Deletion

The Quiz And Survey Master plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 8.0.8. This is due to missing nonce validation on the function associated with the qsmremovefilefdquestion AJAX action. This makes it possible for unauthenticated attacker...

CVE-2023-0291

The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the qsmremovefilefdquestion AJAX action in versions up to, and including, 8.0.8. This makes it possible for unauthenticated attackers to delete arbitrar...

CVE-2023-0291 Quiz And Survey Master <= 8.0.8 - Unauthenticated Arbitrary Media Deletion

The Quiz And Survey Master for WordPress is vulnerable to authorization bypass due to a missing capability check on the function associated with the qsmremovefilefdquestion AJAX action in versions up to, and including, 8.0.8. This makes it possible for unauthenticated attackers to delete arbitrar...

CVE-2023-29152

By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account...

CVE-2023-29152 PTC Vuforia Studio Improper Authorization

By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account...

CVE-2023-29152

CVE-2023-29152 affects PTC Vuforia Studio (all versions prior to 9.9). The vulnerability stems from altering the filename parameter in a request, enabling an attacker to delete arbitrary files with the Vuforia server account’s permissions. Impact is file deletion with potential persistence risk a...

CVE-2023-29152 PTC Vuforia Studio Improper Authorization

By changing the filename parameter in the request, an attacker could delete any file with the permissions of the Vuforia server account...

CVE-2020-36728

The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows unauthenticated attackers to delete arbitrary files which can be used to reset and gain full control of a site...

Path traversal

The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows unauthenticated attackers to delete arbitrary files which can be used to reset and gain full control of a site...

CVE-2020-36728 Adning Advertising <= 1.5.5 - Unauthenticated Arbitrary File Deletion via Path Traversal

The Adning Advertising plugin for WordPress is vulnerable to file deletion via path traversal in versions up to, and including, 1.5.5. This allows unauthenticated attackers to delete arbitrary files which can be used to reset and gain full control of a site...

CVE-2020-36728

CVE-2020-36728 concerns the WordPress Adning Advertising plugin. Public docs consistently describe unauthenticated path traversal that can delete arbitrary files (up to version 1.5.5, with some sources indicating issues up to 1.5.5 or 1.5.6). Nuclei templates also flag an arbitrary file upload vu...