CVE-2018-1452

CVE-2018-1452 affects IBM DB2 for Linux/UNIX/Windows (including DB2 Connect Server) across multiple versions (9.7, 10.1, 10.5, 11.1). A local user could overwrite arbitrary files owned by the DB2 instance owner. IBM security bulletins cite fixes: DB2 v11.1–11.1.3.3 (iFix001); v10.5–FP9; v10.1–FP6...

CVE-2018-1452

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140047...

CVE-2018-1449

CVE-2018-1449 affects IBM DB2 for Linux, UNIX and Windows (incl. DB2 Connect Server) versions 9.7, 10.1, 10.5, 11.1; vulnerability allows a local user to overwrite arbitrary files owned by the DB2 instance owner. Connected IBM bulletins show multiple DB2-related CVEs with same class of file-overw...

CVE-2018-1451

CVE-2018-1451 affects IBM DB2 for Linux, UNIX and Windows (incl. DB2 Connect Server) on versions 9.7, 10.1, 10.5 and 11.1. The vulnerability could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. Exploitation details are not provided in the supplied documents. IBM ...

CVE-2018-1452: Undefined Security Weakness

IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server 9.7, 10.1, 10.5, and 11.1 contains a vulnerability that could allow a local user to overwrite arbitrary files owned by the DB2 instance owner. IBM X-Force ID: 140047...

Path traversal

Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into...

CVE-2018-7933

Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions before WS5200-10 1.9.6 have a path traversal vulnerability. Due to the lack of validation while these home gateway products install APK plugins, an attacker tricks a user into...

Unzip vulnerable to slip-zip attack

When extracting a ZIP file using the Unzip class, a prepared zip file could overwrite arbitrary files as the basedir wasn't enforced. All released versions starting with 1.0 are affected. The issue is addressed in release v1.8.1.6. You can modify earlier versions by implementing the changes from...

DEBIAN-CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

Directory traversal

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

UBUNTU-CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

CVE-2018-1000161

CVE-2018-1000161 affects nmap versions 6.49BETA6 through 7.60 (including SVN r37147). The vulnerability is a Directory Traversal in the NSE script http-fetch that can cause file overwrite when the script is executed by a user, exploitable when a victim runs the NSE http-fetch against a malicious ...

CVE-2018-1000161

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

CVE-2018-1000161: Improper Limitation of a Pathname to a Restricted Directory

nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can result in file overwrite as the user is running it. This attack appears to be exploitable via a victim that runs NSE script http-fetch against...

PT-2018-9332

Name of the Vulnerable Software and Affected Versions nmap versions 6.49BETA6 through 7.60 Description The issue is related to a Directory Traversal vulnerability in the NSE script http-fetch that can result in file overwrite. This can be exploited when a victim runs the http-fetch script against...

AMD Driver Installer and Gaming Evolved Product plays.tv Service Write File Vulnerability

AMD driver-installation packages and Gaming Evolved products are both products of AMD, Inc. AMD driver-installation packages are a set of driver installation packages for AMD graphics cards. Gaming Evolved products are game optimization products. plays.tv is one of the game recording and sharing...

Arbitrary File Overwrite

JSNAPy is vulnerable to arbitrary file overwrite attacks. The default configuration and sample files are created world writable, allowing a local malicious user to edit files in the /etc/jsnapy directory...