1426 matches found
DVD Creator 4.1.0 - Insecure File Permissions Vulnerability
Document Title: =============== DVD Creator 4.1.0 - Insecure File Permissions Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2104 Release Date: ============= 2017-11-28 Vulnerability Laboratory ID VL-ID: ==================================...
Automated Logic WebCTRL 6.5 Insecure File Permissions Privilege Escalation
Description WebCTRL server/service suffers from an elevation of privileges vulnerability which can be used by a simple authenticated user that can change the executable file with a binary of choice. The vulnerability exist due to the improper permissions, with the 'M' flag Modify or 'C' flag Chan...
CloudBees Jenkins Git Client Plugin Information Disclosure Vulnerability
CloudBees Jenkins formerly known as Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools , it is mainly used to monitor the continuous software version of the release/testing project and some of the timed execution of the task . Git...
CVE-2017-15957
myprofile.php in Ingenious School Management System 2.3.0 allows a student or teacher to upload an arbitrary file...
JGI CMS 1.0 - Multiple Vulnerabilities
Exploit for php platform in category web applications JGI CMS 1.0 - Multiple Vulnerabilities 1---------------------------------- A Directory Traversal vulnerability has been discovered in the JCI CMS web-application. The vulnerability is located in the 'arquivo' parameter of thedl.php action GET...
Cougar-LG Insecure File Path Vulnerability
Cougar-LG is a set of web applications written in Perl for connecting to a router or console. A security vulnerability exists in the lg.pl file in Cistron-LG 1.01. A remote attacker could use this vulnerability to obtain IP addresses and other router credentials...
CVE-2013-7426
Insecure Temporary file vulnerability in /tmp/kamailiofifo in kamailio 4.0.1...
Command injection
Nagios Core before 4.3.3 creates a nagios.lock PID file after dropping privileges to a non-root account, which might allow local users to kill arbitrary processes by leveraging access to this non-root account for nagios.lock modification before a root script executes a "kill cat...
Automated Logic WebCTRL 6.5 - Local Privilege Escalation
Automated Logic WebCTRL 6.5 Insecure File Permissions Privilege Escalation Vendor: Automated Logic Corporation Product web page: http://www.automatedlogic.com Affected version: ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior ALC WebCTRL, SiteScan Web 6.1 and prior ALC WebCTRL, i-Vu 6.0 and prior AL...
Automated Logic WebCTRL 6.5 - Local Privilege Escalation
Automated Logic WebCTRL 6.5 - Local Privilege Escalation Automated Logic WebCTRL 6.5 Insecure File Permissions Privilege Escalation Vendor: Automated Logic Corporation Product web page: http://www.automatedlogic.com Affected version: ALC WebCTRL, i-Vu, SiteScan Web 6.5 and prior ALC WebCTRL,...
Automated Logic WebCTRL 6.5 Insecure File Permissions Privilege Escalation
Summary WebCTRL®, Automated Logic's web-based building automation system, is known for its intuitive user interface and powerful integration capabilities. It allows building operators to optimize and manage all of their building systems - including HVAC, lighting, fire, elevators, and security -...
IBM WebSphere Application Server 7.0 < 7.0.0.45 / 8.0 < 8.0.0.14 / 8.5 < 8.5.5.12 / 9.0 < 9.0.0.5 Insecure File Permissions (PI79343)
The version of IBM WebSphere Application Server running on the remote host is 7.0 prior to 7.0.0.45, 8.0 prior to 8.0.0.14, 8.5 prior to 8.5.5.12, or 9.0 prior to 9.0.0.5. It is, therefore, affected by an insecure permissions flaw after custom startup scripts are run. The custom startup script do...
CVE-2017-7480
rkhunter versions before 1.4.4 are vulnerable to file download over insecure channel when doing mirror update resulting into potential remote code execution...
Design/Logic Flaw
In EMC VNX2 versions prior to OE for File 8.1.9.211 and VNX1 versions prior to OE for File 7.1.80.8, a local authenticated user can load a maliciously crafted file in the search path which may potentially allow the attacker to execute arbitrary code on the targeted VNX Control Station system, aka...
HP SimplePass 8.x Local Privilege Escalation
Vulnerability Title: HP SimplePass Local Privilege Escalation Advisory Release Date: 05/18/2017 Credit: Discovered By Rehan Ahmed Contact: [email protected] Severity Level: Medium Type: Local Tested Platform: Windows 8 & 10 x64 Vendor: HP Inc. Vendor Site: http://www.hp.com Download Link:...
JVN#71572107: Installer of Vivaldi for Windows may insecurely load executable files
The installer of Vivaldi for Windows contains an issue in the file search path when loading files, which may insecurely load executable files CWE-427. Impact Arbitrary code may be executed with the privilege of the user invoking the installer. Solution Use the latest installer Use the latest...
Input validation
F-Secure Software Updater 2.20, as distributed in several F-Secure products, downloads installation packages over plain http and does not perform file integrity validation after download. Man-in-the-middle attackers can replace the file with their own executable which will be executed under the...
OpenStack tripleo-common insecure file permissions vulnerability
OpenStack tripleo-common is a Python library for common code for the TripleO CLI and TripleO UI. OpenStack tripleo-common is vulnerable to an insecure file permission vulnerability. A local attacker can exploit this vulnerability to cause directory traversal and gain root access to the shadowed...
SUSE SLES11 Security Update : mysql (SUSE-SU-2017:0408-1)
This mysql version update to 5.5.54 fixes the following issues : - CVE-2017-3318: Unspecified vulnerability affecting Error Handling bsc1020896 - CVE-2017-3317: Unspecified vulnerability affecting Logging bsc1020894 - CVE-2017-3313: Unspecified vulnerability affecting the MyISAM component...
