40 matches found
CVE-2026-111854
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access...
Samba NTFS Reparse Point
The vulnerability of the NTFS reparse point mechanism in Samba software is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to modify arbitrary files...
Samba vfs_worm module file modification
The vulnerability of the vfsworm module in Samba software is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability allows a remote attacker to modify arbitrary files...
Race condition in xterm allows local users to modify arbitrary files via the logging option.
...
CVE-2025-42977: Improper Limitation of a Pathname to a Restricted Directory
SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user. This allows an attacker to read or modify arbitrary files, resulting in a high impact on confidentiality and a low impact on integrity...
Beta Access Utility Arbitrary File Modification
The vulnerability of the Beta Access Utility component of the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify arbitrary files...
Archive_Tar: directory traversal due to inadequate checking of symbolic links
A flaw was found in the ArchiveTar package. ArchiveTar could allow a remote attacker to traverse directories on the system caused by inadequate checking of symbolic links. An attacker could send a specially-crafted URL request to the Tar.php script containing "dot dot" sequences /../ to modify...
Apache Struts Access Control File Modification
The vulnerability of the Apache Struts software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify arbitrary files remotely...
GHSA-V2GW-X5JF-PGWV Mercurial Directory traversal vulnerability
Directory traversal vulnerability in patch.py in Mercurial before 1.0.2 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...
CVE-2020-35948
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xclonerrestore.php writefileaction could...
PT-2020-20066
Name of the Vulnerable Software and Affected Versions Citrix Gateway Plug-in for Windows versions prior to 13.0-61.49 Citrix Gateway Plug-in for Windows versions prior to 12.1-58.16 Description The issue is related to improper privilege management on services run by the software, allowing an...
PT-2019-17947
Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.3 Description A directory traversal issue allows remote authenticated attackers to modify arbitrary files using the Customapp function. Recommendations For Cybozu Office versions 10.0.0 through 10.8.3...
PT-2019-4017
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in file creation handling in the iphlpsvc.dll library of the Windows operating system. It allows an attacker to potentially elevate their privileges and modify...
CVE-2019-14397
cPanel before 80.0.5 allows demo accounts to modify arbitrary files via the extractfile API1 call SEC-496...
PT-2019-19681
Name of the Vulnerable Software and Affected Versions Trend Micro Apex One affected versions not specified Trend Micro OfficeScan versions XG and 11.0 Trend Micro Worry-Free Business Security versions 10.0, 9.5, and 9.0 Description A directory traversal issue could allow an attacker to modify...
CVE-2019-3827
An incorrect permission check in the admin backend in gvfs before version 1.39.4 was found that allows reading and modify arbitrary files by privileged users without asking for password when no authentication agent is running. This vulnerability can be exploited by malicious programs running unde...
Cisco StarOS Remote Security Bypass Vulnerability
Cisco StarOS is the United States Cisco Cisco company's set of operating systems running in the 5000 and other series of router equipment. A remote security bypass vulnerability exists in Cisco StarOS, which can be exploited by a remote authenticated attacker to modify arbitrary files. The...
PT-2017-7369
Name of the Vulnerable Software and Affected Versions AXIS Communications products versions prior to 5.81 Description The issue allows remote attackers to modify arbitrary files as root via vectors involving Open Script Editor. This is described as a resource injection vulnerability...
Cisco AnyConnect Secure Mobility Client IPC Command File Modification Vulnerability
Cisco AnyConnect Secure Mobility is a secure enterprise mobility solution. Cisco AnyConnect Secure Mobility Client fails to properly validate IPC commands, allowing a local attacker to exploit the vulnerability to modify arbitrary files with elevated privileges...
