13400 matches found
Arbitrary file deletion
The WP Fastest Cache plugin for WordPress is vulnerable to unauthorized data loss due to a missing capability check on the deleteCssAndJsCacheToolbar function in versions up to, and including, 1.1.2. This makes it possible for authenticated attackers with subscriber-level access to perform cache...
Arbitrary file deletion
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges...
CVE-2023-28046
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges...
CVE-2023-28046
Summary: CVE-2023-28046 affects Dell Display Manager for Windows, specifically version 2.1.0 and earlier. The vulnerability is described as an arbitrary file or folder deletion vulnerability during uninstallation, exploitable by a local low-privilege attacker, potentially allowing deletion of arb...
CVE-2023-28046: Least Privilege Violation
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges...
PT-2023-21511
Name of the Vulnerable Software and Affected Versions Dell Display Manager versions 2.1.0 and prior Description The issue allows a local low privilege attacker to potentially exploit a vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges. This...
Design/Logic Flaw
The Order GLPI plugin allows users to manage order management within GLPI. Starting with version 1.8.0 and prior to versions 2.7.7 and 2.10.1, an authenticated user that has access to standard interface can craft an URL that can be used to execute a system command. Versions 2.7.7 and 2.10.1 conta...
VulnCheck KEV: CVE-2023-25446
Missing Authorization vulnerability in HappyFiles HappyFiles Pro happyfiles-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HappyFiles Pro: from n/a through 1.8.1...
Arbitrary file deletion
An arbitrary file download vulnerability in the background management module of RuoYi v4.7.6 and below allows attackers to download arbitrary files in the server...
A vulnerability in the web interface for operating systems ArubaOS, which allows a hacker to delete any files they desire.
The vulnerability in the web interface for operating systems ArubaOS is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to delete any files remotely...
CVE-2022-2560
This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...
Design/Logic Flaw
This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...
CVE-2022-2560
This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...
CVE-2022-2560: Improper Limitation of a Pathname to a Restricted Directory
This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...
WordPress HappyFiles Pro Plugin <= 1.8.1 is vulnerable to Arbitrary File Deletion
Software HappyFiles Pro Type Plugin Vulnerable versions = 1.8.1 Fixed in 1.8.2 OWASP Top 10 A5: Broken Access Control Classification Arbitrary File Deletion CVE CVE-2023-25446 Patch priority High CVSS severity High 7.7 Developer Claim ownership PSID 9c01f634cec4 Credits Dave Jong Patchstack...
CVE-2022-2560
This vulnerability allows remote attackers to delete arbitrary files on affected installations of EnterpriseDT CompleteFTP 22.1.0 Server. Authentication is not required to exploit this vulnerability. The specific flaw exists within the HttpFile class. The issue results from the lack of proper...
CVE-2022-2560
CVE-2022-2560 affects EnterpriseDT CompleteFTP Server (version 22.1.0) with a flaw in the HttpFile class that fails to validate a user-supplied path before file operations. This allows remote attackers to delete arbitrary files with SYSTEM privileges and no authentication. Multiple connected sour...
CVE-2023-27701
MuYuCMS v2.2 was discovered to contain an arbitrary file deletion vulnerability via the component /database/sqldel.html...