CVE-2023-49788

Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CODE Server richdocumentscode is run without chroot sandboxing. Vulnerable versions of the richdocumentscode app can be susceptible to attac...

CVE-2023-44306

Dell DM5500 exposes a path traversal vulnerability in the PPOE component that could allow a remote attacker with high privileges to overwrite configuration files on the server filesystem. The affected product is the Dell DM5500 appliance; the vulnerability arises from improper filtering of path e...

Dell DM5500 路径遍历漏洞

The Dell DM5500 is an integrated solution from Dell, Inc. It provides industry-leading deduplication, data protection solutions and multi-cloud capabilities. The Dell DM5500 suffers from a path traversal vulnerability that stems from a failure to properly filter special elements in the path of a...

File Overwrite

libzfs.so is vulnerable to File Overwrite. The vulnerability is due to dnodeisdirty function in dnode.c because there are no checks for detailed modification records for the dnode, it's only checking the dn-dndirtylink array to determine if the dnode is dirty. This can leads to file contents bein...

SUSE SLES15: libnss_slurm2_23_02 / libpmi0_23_02 / libslurm39 / perl-slurm_23_02 / etc (SUSE-SU-2023:4564-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE- SU-2023:4564-1 advisory. - CVE-2023-41914: Fixed a filesystem handling race conditions that could have led to an attacker taking control of an arbitrary file, or removing entir...

CVE-2023-5299

A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system...

Information disclosure

A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system...

CVE-2023-5299 Fuji Electric Tellus Lite V-Simulator Improper Access Control

A user with a standard account in Fuji Electric Tellus Lite may overwrite files in the system...

CVE-2023-5299

Fuji Electric Tellus Lite V-Simulator is affected by an Improper Access Control vulnerability (CVE-2023-5299). A user with a standard account may overwrite files on the system, as documented in multiple sources. The issue is tied to local access permissions rather than remote exploitation, with m...

PT-2023-32553 · Nessus · Nessus

Name of the Vulnerable Software and Affected Versions: Nessus affected versions not specified Description: An issue exists where an authenticated attacker with privileges on the managing application could alter variables to overwrite arbitrary files on the remote host, potentially leading to a...

Nessus Buffer Error Vulnerability

Tenable Network Security Nessus is an open source system vulnerability scanner from Tenable Network Security, USA. A security vulnerability exists in Nessus 10.6.2 and earlier versions that originated from a vulnerability that allows an attacker with administrator privileges to change Nessus rule...

Authentication flaw

An attacker can overwrite any file on the server hosting MLflow without any authentication...

Mlflow Security Vulnerabilities

Mlflow is an open source platform for machine learning lifecycle. Mlflow has a security vulnerability that stems from allowing an unauthorized attacker to overwrite any file on MLflow's servers...

Rockwell Automation Stratix Configuration Directive File Overwrite (CVE-2015-7703)

Multiple Cisco products incorporate a version of the ntpd package. Versions of this package are affected by one or more vulnerabilities that could allow an unauthenticated, remote attacker to create a denial of service DoS condition or modify the time being advertised by a device acting as a...

CVE-2023-5189

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...

UBUNTU-CVE-2023-5189

A path traversal vulnerability exists in Ansible when extracting tarballs. An attacker could craft a malicious tarball so that when using the galaxy importer of Ansible Automation Hub, a symlink could be dropped on the disk, resulting in files being overwritten...

CVE-2023-5189

CVE-2023-5189 affects Ansible’s galaxy-importer tarball extraction in Ansible Automation Hub. A crafted tarball could trigger path traversal, dropping a symlink and overwriting files. Red Hat advisories note fixes: update to ansible-core 2.15.8 and python3-galaxy-importer (galaxy-importer) 0.4.18...

Rockwell Automation SIS Workstation and ISaGRAF Workbench

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : SIS Workstation and ISaGRAF Workbench Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unprivileged local...

RHEL 8 : python3.11 (RHSA-2023:7024)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:7024 advisory. Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level...

python: tarfile module directory traversal

A flaw was found in the Python tarfile module. Extracting a crafted TAR archive with the tarfile.extract or tarfile.extractall functions could lead to a directory traversal vulnerability, resulting in overwrite of arbitrary files...