13512 matches found
Eaton Intelligent Power Manager Arbitrary File Deletion Vulnerability
Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...
Arbitrary File Deletion Vulnerability in hybbs 2.3.2
hybbs is a PHP web program that supports plugin extensions and template extensions. An arbitrary file deletion vulnerability exists in hybbs 2.3.2, which can be exploited by an attacker to compromise the integrity of the system...
Eaton Intelligent Power Manager Arbitrary File Deletion Vulnerability (CNVD-2021-31672)
Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...
SUSE: Security Advisory (SUSE-SU-2016:1260-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Arbitrary File Deletion Vulnerability in CodeIgniter
CodeIgniter is a PHP framework. CodeIgniter has an arbitrary file deletion vulnerability. An attacker can exploit the vulnerability to delete arbitrary files...
Rainy Novel cms has arbitrary file deletion vulnerability
Wild Rain Fiction cms hereinafter referred to as KYXSCMS provides a lightweight fiction website solution based on ThinkPHP 5.1+MySQL. KYXSCMS has an arbitrary file deletion vulnerability. An attacker can use the vulnerability to delete any file in the root directory...
PT-2021-3330
Name of the Vulnerable Software and Affected Versions Samba versions prior to 4.12.15 Samba versions prior to 4.13.8 Samba versions prior to 4.14.4 Description A flaw was found in Samba that could allow it to read data beyond the end of the array in the case where a negative cache entry had been...
CVE-2021-23279
Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to unauthenticated arbitrary file delete vulnerability induced due to improper input validation in metadriversrv.js class with saveDriverData action using invalidated driverID. An attacker can send specially crafted packets to delete...
Input validation
Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/mapssrv.js with action removeBackground and server/nodeupgradesrv.js with action removeFirmware. An attacker can send specially...
CVE-2021-23278 Arbitrary File delete
Eaton Intelligent Power Manager IPM prior to 1.69 is vulnerable to authenticated arbitrary file delete vulnerability induced due to improper input validation at server/mapssrv.js with action removeBackground and server/nodeupgradesrv.js with action removeFirmware. An attacker can send specially...
Eaton Intelligent Power Manager 输入验证错误漏洞
Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...
Eaton Intelligent Power Manager 输入验证错误漏洞
Eaton Intelligent Power Manager IPM is an intelligent power manager from Eaton Corporation that supports remote monitoring and management of multiple devices in a network from an interface. An arbitrary file deletion vulnerability exists in Eaton Intelligent Power Manager versions prior to 1.69,...
CM Download Manager < 2.8.0 - Authenticated Arbitrary File Deletion
The plugin may allow authorized users to delete arbitrary files and possibly cause a denial of service via the fileName parameter in a deletescreenshot action...
PT-2021-15432
Name of the Vulnerable Software and Affected Versions Eaton Intelligent Power Manager IPM versions prior to 1.69 Description The issue arises from improper input validation in the meta driver srv.js class, specifically with the saveDriverData action using an invalidated driverID. This allows an...
Arbitrary file deletion
The Jetpack Scan team identified a Local File Disclosure vulnerability in the Patreon WordPress plugin before 1.7.0 that could be abused by anyone visiting the site. Using this attack vector, an attacker could leak important internal files like wp-config.php, which contains database credentials a...
File Deletion Vulnerability in Super CMS
Super CMS by the SEO Research Center in order to solve the problem of website optimization and research and development of a set of products, using an object-oriented approach to independent research and development of the MVC framework development, is an open source content management system...
Arbitrary File Deletion Vulnerability in TnCMS (CNVD-2021-30351)
TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS has an arbitrary file deletion vulnerability, which can be exploited by an attacker to traverse directories and delete files arbitrarily...
Arbitrary File Deletion Vulnerability in TnCMS
TnCMS is a light content management system based on ThinkPHP6+layUI based development. TnCMS has an arbitrary file deletion vulnerability, which can be exploited by an attacker to traverse directories and delete files arbitrarily...
