Lucene search
+L

9326 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/05/06 12:00 a.m.•6 views

CVE-2021-1512: Files or Directories Accessible to External Parties

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. ...

6CVSS6AI score0.00229EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/05/05 4:00 p.m.•9 views

CVE-2021-1512

A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected system. This vulnerability is due to insufficient validation of the user-supplied input parameters of a specific CLI command. ...

6CVSS5.7AI score0.00229EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2021/05/05 12:00 a.m.•14 views

PT-2021-3256 · Cisco · Cisco Sd-Wan

Name of the Vulnerable Software and Affected Versions: Cisco SD-WAN Software affected versions not specified Description: A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying file system of an affected...

6CVSS4.7AI score0.00229EPSS
SaveExploits0References3
osv_ubuntu
osv_ubuntu
•added 2021/05/04 1:30 p.m.•13 views

UBUNTU-CVE-2020-28014

Exim 4 before 4.94.2 allows Execution with Unnecessary Privileges. The -oP option is available to the exim user, and allows a denial of service because root-owned files can be overwritten...

6.1CVSS7AI score0.0094EPSS
SaveExploits1References4
osv_usn
osv_usn
•added 2021/05/04 12:01 p.m.•13 views

USN-4932-1 python-django vulnerability

It was discovered that Django incorrectly handled certain filenames. A remote attacker could possibly use this issue to create or overwrite files in unexpected directories...

7.5CVSS7.2AI score0.05334EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2021/05/04 12:00 a.m.•12 views

Exim Postfix Vulnerability

Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. Exim suffers from a security vulnerability that exists as a result of the following issue with symbolic links in the Exim log directory. An attacker can exploit the vulnerability to overwri...

7.8CVSS7.3AI score0.0053EPSS
SaveExploits3References8
Vulnrichment
Vulnrichment
•added 2021/04/29 5:30 p.m.•14 views

CVE-2021-1256 Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause system instability if important system files...

6CVSS6.8AI score0.00501EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2021/04/29 5:30 p.m.•45 views

CVE-2021-1256 Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause system instability if important system files...

6CVSS6.2AI score0.00501EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/29 12:00 a.m.•7 views

CVE-2021-1256: Files or Directories Accessible to External Parties

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause system instability if important system files...

6CVSS5.9AI score0.00501EPSS
SaveExploits0References7
attackerkb
attackerkb
•added 2021/04/28 4:00 p.m.•12 views

CVE-2021-1256

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause system instability if important system files...

6CVSS6.3AI score0.00501EPSS
SaveExploits0References3
Cisco
Cisco
•added 2021/04/28 4:00 p.m.•96 views

Cisco Firepower Threat Defense Software Command File Overwrite Vulnerability

A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite files on the file system of an affected device by using directory traversal techniques. A successful exploit could cause system instability if important system files...

6CVSS6AI score0.00501EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2021/04/28 12:00 a.m.•18 views

PT-2021-2794 · Cisco · Cisco Ftd

Name of the Vulnerable Software and Affected Versions: Cisco Firepower Threat Defense FTD Software affected versions not specified Description: A vulnerability in the CLI of Cisco Firepower Threat Defense FTD Software could allow an authenticated, local attacker to overwrite files on the file...

6.2CVSS5.9AI score0.00501EPSS
SaveExploits0References8
CNVD
CNVD
•added 2021/04/28 12:00 a.m.•21 views

IBM Spectrum Scale File Overwrite Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

6CVSS6.4AI score0.00223EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2021/04/28 12:00 a.m.•24 views

Cisco Firepower Threat Defense security vulnerabilities

Cisco Firepower Threat Defense FTD is a suite of unified software from Cisco that provides next-generation firewall services. A security vulnerability exists in Cisco Firepower Threat Defense that stems from a command line vulnerability that can be exploited by an authenticated, local attacker to...

6CVSS6.1AI score0.00501EPSS
SaveExploits0References7
Prion
Prion
•added 2021/04/27 5:15 p.m.•32 views

Input validation

IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...

3.6CVSS5.5AI score0.00223EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2021/04/27 12:00 a.m.•10 views

CVE-2020-4981: Improper Input Validation

IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...

6CVSS5.8AI score0.00223EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2021/04/26 12:00 a.m.•10 views

CVE-2020-4981

IBM Spectrum Scale 5.0.4.1 through 5.1.0.3 could allow a local privileged user to overwrite files due to improper input validation. IBM X-Force ID: 192541...

6CVSS4.9AI score0.00223EPSS
SaveExploits0References3Affected Software1
CNNVD
CNNVD
•added 2021/04/26 12:00 a.m.•20 views

IBM Spectrum Scale input validation vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

6CVSS5.6AI score0.00223EPSS
SaveExploits0References4
osv_mgasa
osv_mgasa
•added 2021/04/23 10:53 p.m.•35 views

MGASA-2021-0196 Updated krb5-appl packages fix security vulnerabilities

An issue was discovered in rcp in MIT krb5-appl through 1.0.3. Due to the rcp implementation being derived from 1983 rcp, the server chooses which files/directories are sent to the client. However, the rcp client only performs cursory validation of the object name returned only directory traversa...

7.5CVSS6.2AI score0.01546EPSS
SaveExploits2References3
attackerkb
attackerkb
•added 2021/04/22 1:15 a.m.•15 views

CVE-2021-29465

Discord-Recon is a bot for the Discord chat service. Versions of Discord-Recon 0.0.3 and prior contain a vulnerability in which a remote attacker is able to overwrite any file on the system with the command results. This can result in remote code execution when the user overwrite important files ...

9.8CVSS7.4AI score0.01958EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder