CVE-2020-15229: Improper Limitation of a Pathname to a Restricted Directory

Singularity an open source container platform from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack of path sanitization within unsquashfs, it is possible to overwrite/create any files on the host filesystem during the extraction with a...

PT-2020-14295

Name of the Vulnerable Software and Affected Versions Singularity versions 3.1.1 through 3.6.3 Description The issue arises from insecure handling of path traversal and the lack of path sanitization within unsquashfs, allowing an attacker to overwrite or create any files on the host filesystem...

Cisco Nexus Data Broker Software Path Traversal Vulnerability

Nexus Data Broker provides a simple, scalable and cost-effective monitoring solution for high volume and business-critical traffic. A path traversal vulnerability exists in the configuration recovery feature of Cisco Nexus Data Broker Software 3.90 and earlier. The vulnerability stems from...

CVE-2020-3597

Cisco Nexus Data Broker Software is affected by CVE-2020-3597. A path traversal vulnerability exists in the configuration restore feature due to insufficient validation of configuration backup files. An unauthenticated, remote attacker could trick an administrator into restoring a crafted backup ...

CVE-2020-3597: Relative Path Traversal

A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory traversal attack on an affected device. The vulnerability is due to insufficient validation of configuration backup files. An attacker...

PT-2020-15158

Name of the Vulnerable Software and Affected Versions WhatsApp for iOS versions prior to 2.20.61 WhatsApp Business for iOS versions prior to 2.20.61 Description A path validation issue could have allowed for directory traversal, overwriting files when sending specially crafted docx, xlsx, and ppt...

PT-2020-15364

Name of the Vulnerable Software and Affected Versions halo version 1.1.3 Description An issue was discovered in the backend of the software, allowing for a Zip Slip Directory Traversal. This enables an attacker to overwrite certain files, including ftl files and .bashrc files in the user director...

cPanel File Management Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A security vulnerability exists in cPanel versions prior to 90.0.10, which stems from a mail quota cache that allows overwriting ...

CVE-2020-26112

The email quota cache in cPanel before 90.0.10 allows overwriting of files...

CVE-2020-26112

The email quota cache in cPanel before 90.0.10 allows overwriting of files...

CVE-2020-26112: Undefined Security Weakness

The email quota cache in cPanel before 90.0.10 allows overwriting of files...

CVE-2020-3476 Cisco IOS XE Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying host file system. The vulnerability is due to insufficient validation of the parameters of a specific CLI command. A...

CVE-2020-3476 Cisco IOS XE Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying host file system. The vulnerability is due to insufficient validation of the parameters of a specific CLI command. A...

CVE-2020-3476: Files or Directories Accessible to External Parties

A vulnerability in the CLI implementation of a specific command of Cisco IOS XE Software could allow an authenticated, local attacker to overwrite arbitrary files in the underlying host file system. The vulnerability is due to insufficient validation of the parameters of a specific CLI command. A...

PT-2020-5115

Name of the Vulnerable Software and Affected Versions Cisco IOS XE Software affected versions not specified Description A vulnerability in the CLI implementation of a specific command could allow an authenticated, local attacker to overwrite arbitrary files in the underlying host file system. The...

CVE-2020-3130

A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...

CVE-2020-3130: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying filesystem. The vulnerability is due to insufficient input validation. An attacker could exploit this vulnerability by sending a crafted HTTP...

Path traversal

An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Script Name, an attacker may write to or overwrite arbitrary files, with arbitrary content, usually with NT AUTHORITY\SYSTEM privileges...

CAMS HIS Emergency Message Arbitrary File Creation Command Execution

The vulnerability of the CAMS for HIS distributed control systems’ emergency message and event management component is related to deficiencies in checking the path name to the restricted-access catalog. Exploiting this vulnerability could allow an attacker to create or re-record arbitrary files a...

CVE-2020-2278

Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any other '.xml' file on the Jenkins controller with a job config.xml file's content...