29 matches found
CVE-2023-23294
Korenix JetWave 4200 Series 1.3.0 and JetWave 3000 Series 1.6.0 are vulnerable to Command Injection. An attacker can modify the filename parameter to execute commands as root...
CVE-2022-3940
A vulnerability, which was classified as problematic, was found in lanyulei ferry. This affects an unknown part of the file apis/process/task.go. The manipulation of the argument filename leads to path traversal. The associated identifier of this vulnerability is VDB-213447...
Directory Traversal
libtar.so is vulnerable to directory traversal. Lack of insecure sanitization of the filename parameter, aka POINTYFEATHER allows a bypass of an intended protection mechanism, leading to writing of arbitrary files via vectors...
Directory traversal
get2post.php in IDERA Uptime Monitor 7.8 has directory traversal in the filename parameter...
EUVD-2016-7248
Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the filename parameter, aka POINTYFEATHER...
CVE-2016-6321
Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended protection mechanism and write to arbitrary files via vectors related to improper sanitization of the filename parameter, aka POINTYFEATHER...
CVE-2009-2375
Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long FileName parameter in a .pdm file. NOTE: some of these details are obtained from third party information...
Stack overflow
Stack-based buffer overflow in Photo DVD Maker 8.02, and possibly earlier versions, allows remote attackers to execute arbitrary code via a long FileName parameter in a .pdm file. NOTE: some of these details are obtained from third party information...
