2062 matches found
CVE-2015-4034: Improper Access Control
The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object...
WordPress ThemePunch Slider Revolution plugin and Showbiz Pro plugin have multiple vulnerabilities
WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language, the platform supports in PHP and MySQL server set up a personal blog site.ThemePunch Slider Revolution revslider is one of the slideshow plugin.Showbiz Pro is one of the scrolling display...
PT-2015-6860
Name of the Vulnerable Software and Affected Versions Novius OS version 5.0.1 Description A directory traversal issue allows remote attackers to include and execute arbitrary local files. This is achieved by using a .. dot dot in the tab parameter to the "admin/" endpoint. Recommendations For...
PT-2015-1399
Name of the Vulnerable Software and Affected Versions IBM Tivoli Storage Manager FastBack versions prior to 6.1.12 Description The issue allows remote attackers to write to and execute arbitrary files by sending crafted TCP packets to an unspecified port. This is due to insufficient input...
Epignosis eFront has multiple vulnerabilities
Epignosis eFront is an online learning system with an Ajax interface from Epignosis USA. The system allows you to create and manage courses with tools such as a content editor, file manager, and digital library. A security vulnerability exists in Epignosis eFront. An attacker can exploit the...
CVE-2015-4153: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the zM Ajax Login & Register plugin before 1.1.0 for WordPress allows remote attackers to include and execute arbitrary php files via a relative path in the template parameter in a loadtemplate action to wp-admin/admin-ajax.php...
CVE-2015-2995
CVE-2015-2995 affects SysAid Help Desk prior to 15.2, in the RdsLogsEntry servlet, where improper file-extension checking allows remote upload and execution of arbitrary files via a NULL byte after the extension (e.g., .war%00). Connected sources confirm a concrete exploit surface, including a Me...
Aruba Networks CPPM Directory Traversal Vulnerability (CNVD-2015-03506)
Aruba Networks ClearPass Policy Manager is an advanced policy management platform for role- and device-based network access control. A directory traversal security vulnerability exists in Aruba Networks ClearPass Policy Manager CPPM, which can be exploited by a remote administrator to execute...
CVE-2015-4032
projectContents.jsp in the Developer tools in Visual Mining NetCharts Server allows remote attackers to rename arbitrary files, and consequently execute them, via unspecified vectors...
CVE-2015-1550: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Aruba Networks ClearPass Policy Manager CPPM before 6.4.5 allows remote administrators to execute arbitrary files via unspecified vectors...
CVE-2015-2233: Undefined Security Weakness
Lenovo System Update formerly ThinkVantage System Update before 5.06.0034 does not properly validate CA chains during signature validation, which allows man-in-the-middle attackers to upload and execute arbitrary files via a crafted certificate...
CVE-2015-1398: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Magento Community Edition CE 1.9.1.0 and Enterprise Edition EE 1.14.1.0 allow remote authenticated users to include and execute certain PHP files via 1 .. dot dot sequences in the PATHINFO to index.php or 2 vectors involving a block value in the...
CVE-2014-8360: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in inc/autoload.function.php in GLPI before 0.84.8 allows remote attackers to include and execute arbitrary local files via a .. dot dot underscore in an item type to the getItemForItemtype, as demonstrated by the itemtype parameter in ajax/common.tabs.php...
CVE-2015-2775: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. dot dot in a list name...
Multiple WordPress UpThemes Themes - Arbitrary File Upload
Exploit Title: Wordpress SimpleCart Theme File Upload and Execution Google Dork: inurl:/wp-content/themes/simplecart Date: 31 March 2015 Exploit Author: Divya Vendor Homepage: https://github.com/UpThemes/ Software Link: https://github.com/UpThemes/SimpleCart-Theme Version: 2.1.2 Tested on: Window...
UBUNTU-CVE-2015-2775
Directory traversal vulnerability in GNU Mailman before 2.1.20, when not using a static alias, allows remote attackers to execute arbitrary files via a .. dot dot in a list name...
KLA10502 Multiple vulnerabilities in BACnet OPC Server
Multiple critical vulnerabilities have been found in BACnet OPC Server. Malicious users can exploit these vulnerabilities to execute arbitrary files and read&write local database. Below is a complete list of vulnerabilities 1. An unknwon vulnerabilities can be exploited remotely via unknown vecto...
MS15-028: Vulnerability in Windows Task Scheduler could allow security feature bypass: March 10, 2015
None None...
KIE Workbench Arbitrary File Execution Vulnerability
KIE Workbench is a set of JAVA-based development of open source BPM business process management of the complete release , including all the BPM and rules module . An arbitrary file execution vulnerability exists in KIE Workbench 6.0.x that could allow an authenticated remote user to read or write...
PicketBox JBossSX Arbitrary File Execution Vulnerability
PicketBox is a set of java security framework , it provides developers with authentication , authorization , auditing and security mapping functions . An arbitrary file execution vulnerability exists in PicketBox JBossSX, which allows remote authenticated users to exploit the vulnerability to rea...