Code injection

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

CVE-2022-20816 Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

CVE-2022-20816 Cisco Unified Communications Manager Arbitrary File Deletion Vulnerability

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

CVE-2022-20816

CVE-2022-20816 involves Cisco Unified Communications Manager (CUCM) and Unified CM Session Management Edition (Unified CM SME). The issue is in the web-based management interface where requests are not properly validated, allowing an authenticated, remote attacker to delete arbitrary files by sen...

CVE-2022-20816: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...

The vulnerability of the web interfaces of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition allows a perpetrator to delete arbitrary files.

The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition web interfaces is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete...

CVE-2022-27535

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

CVE-2022-27535

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

CVE-2022-27535

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

Arbitrary file deletion

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

CVE-2022-27535

CVE-2022-27535 affects Kaspersky VPN Secure Connection for Windows up to version 21.5. A local authenticated attacker can abuse the app’s Delete All Service Data And Reports feature to perform arbitrary file deletion. Some sources describe potential privilege escalation via crafted symbolic links...

CVE-2022-27535

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

Kaspersky VPN Secure Connection 安全漏洞

Kaspersky VPN Secure Connection is a Vpn client software from the Russian company Kaspersky. The software checks the security of the network. If the Wi-Fi network is not secure, Kaspersky VPN Secure Connection prompts you to enable a secure connection by connecting to a specially assigned server...

CVE-2022-27535: Undefined Security Weakness

Kaspersky VPN Secure Connection for Windows version up to 21.5 was vulnerable to arbitrary file deletion via abuse of its 'Delete All Service Data And Reports' feature by the local authenticated attacker...

The vulnerability of the Kaspersky VPN Secure Connection remote access tool lies in its ability to delete arbitrary files from the system, allowing a hacker to increase their privileges.

The vulnerability of the Kaspersky VPN Secure Connection remote access tool relates to the possibility of deleting arbitrary files in the system. Exploiting this vulnerability could allow an attacker to enhance their privileges by creating a specially crafted symbolic link to a critical folder in...

CVE-2022-31132 Unauthenticated SSRF in 3rd party module "cerdic/csstidy"

Nextcloud Mail is an email application for the nextcloud personal cloud product. Affected versions shipped with a CSS minifier on the path ./vendor/cerdic/css-tidy/cssoptimiser.php. Access to the minifier is unrestricted and access may lead to Server-Side Request Forgery SSRF. It is recommendet t...

PT-2022-3970 · Kaspersky · Kaspersky Vpn Secure Connection For Windows

Name of the Vulnerable Software and Affected Versions: Kaspersky VPN Secure Connection for Windows version up to 21.5 Description: The issue is related to the possibility of arbitrary file deletion in the system via abuse of the 'Delete All Service Data And Reports' feature by a local authenticat...

WordPress plugin Download Manager 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPres...

WordPress Download Manager 3.2.50 Arbitrary File Deletion

Description: Authenticated Contributor+ Arbitrary File Deletion Affected Plugin: Download Manager Plugin Slug: download-manager Plugin Developer: W3 Eden, Inc. Affected Versions: = 3.2.50 CVE ID: CVE-2022-2431 CVSS Score: 8.8 High CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H...

CVE-2022-20816

A vulnerability in the web-based management interface of Cisco Unified Communications Manager Unified CM and Cisco Unified Communications Manager Session Management Edition Unified CM SME could allow an authenticated, remote attacker to delete arbitrary files from an affected system. This...