PT-2024-36396

Name of the Vulnerable Software and Affected Versions socat versions prior to 1.8.0.2 Description The issue is related to the readline.sh file in socat, which relies on the /tmp/$USER/stderr2 file. This can lead to an arbitrary file overwrite via a predictable /tmp directory. Recommendations For...

CVE-2024-54159

A flaw was found in stalld package. The affected versions of stalld allow local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159: Incorrect Permission Assignment for Critical Resource

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

PT-2024-36076

Name of the Vulnerable Software and Affected Versions: stalld versions 1.19.7 and earlier Description: The issue allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack. Recommendations: For versions 1.19.7 and earlier, as a temporary workaround, consid...

CVE-2024-51127

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information. Mitigation There is currently no known mitigation for this vulnerability...

CVE-2024-46939

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

CVE-2024-46939

The CVE-2024-46939 issue affects the vivo Game Extension Engine, versions 1.2.7.0 and earlier. The engine exposes certain components, enabling attackers to craft parameters for path traversal attacks that can overwrite local files. No explicit patch/version fix is documented in the provided sourc...

CVE-2024-48862: Improper Link Resolution Before File Access

A link following vulnerability has been reported to affect QuLog Center. If exploited, the vulnerability could allow remote attackers to traverse the file system to unintended locations and read or overwrite the contents of unexpected files. We have already fixed the vulnerability in the followin...

CVE-2024-6233: Improper Link Resolution Before File Access

Check Point ZoneAlarm Extreme Security Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Check Point ZoneAlarm Extreme Security. An attacker must first obtain the ability to execute low-privileged...

PT-2024-33250

Name of the Vulnerable Software and Affected Versions QuLog Center versions prior to 1.7.0.831 QuLog Center versions prior to 1.8.0.888 Description A link following vulnerability has been reported to affect QuLog Center, allowing remote attackers to traverse the file system to unintended location...

CVE-2020-26074

A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system. The vulnerability is due to improper validation of path input to the system file transfer functions. An...

CVE-2024-41971

A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss...

CVE-2024-41972 WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges...

CVE-2024-41972 WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges...

CVE-2024-41971 WAGO: Arbitrary File Overwrite in Multiple Devices

A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss...

PT-2024-29671 · Wago · Cc100 0751-9X01 +10

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A low privileged remote attacker can overwrite an arbitrary file on the filesystem, leading to a Denial of Service DoS and data loss. Recommendations: A...

CVE-2020-26074: Execution with Unnecessary Privileges

A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system. The vulnerability is due to improper validation of path input to the system file transfer functions. An...