Lucene search
+L

1809 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/04/27 12:00 a.m.•4 views

CVE-2011-3602: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in device-linux.c in the router advertisement daemon radvd before 1.8.2 allows local users to overwrite arbitrary files, and remote attackers to overwrite certain files, via a .. dot dot in an interface name. NOTE: this can be leveraged with a symlink to overwrit...

6.4CVSS6AI score0.02849EPSS
SaveExploits0References2
osv_ubuntu
osv_ubuntu
•added 2014/04/23 3:55 p.m.•18 views

UBUNTU-CVE-2014-2893

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names...

1.9CVSS5.9AI score0.00404EPSS
SaveExploits0References3
CVE
CVE
•added 2014/04/23 2:00 p.m.•76 views

CVE-2014-2893

CVE-2014-2893 affects the GetHTMLRunDir function in the scan-build utility of Clang up to version 3.5 (and earlier). The issue permits local users to disclose sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names. Exploitation deta...

1.9CVSS6AI score0.00404EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
•added 2014/04/23 2:00 p.m.•45 views

CVE-2014-2893

The GetHTMLRunDir function in the scan-build utility in Clang 3.5 and earlier allows local users to obtain sensitive information or overwrite arbitrary files via a symlink attack on temporary directories with predictable names...

5.9AI score0.00404EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2014/04/23 2:00 p.m.•51 views

CVE-2014-2893

Removed by vendor...

1.9CVSS6.9AI score0.00404EPSS
SaveExploits0
osv_cve
osv_cve
•added 2014/04/22 2:23 p.m.•25 views

CVE-2013-4472

The openTempFile function in goo/gfile.cc in Xpdf and Poppler 0.24.3 and earlier, when running on a system other than Unix, allows local users to overwrite arbitrary files via a symlink attack on temporary files with predictable names...

6.5AI score
SaveExploits0References4
OpenVAS
OpenVAS
•added 2014/04/21 12:00 a.m.•37 views

Ubuntu Update for python-imaging USN-2168-1

Check for the Version of python-imaging OpenVAS Vulnerability Test $Id: gbubuntuUSN21681.nasl 7957 2017-12-01 06:40:08Z santu $ Ubuntu Update for python-imaging USN-2168-1 Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This program is...

4.4CVSS6.6AI score0.00496EPSS
SaveExploits2References2
Debian CVE
Debian CVE
•added 2014/04/16 6:00 p.m.•48 views

CVE-2011-0460

The init script in kbd, possibly 1.14.1 and earlier, allows local users to overwrite arbitrary files via a symlink attack on /dev/shm/defkeymap.map...

6.3CVSS6.3AI score0.00341EPSS
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/03/20 12:00 a.m.•5 views

CVE-2014-1970: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the ES File Explorer File Manager application before 3.0.4 for Android allows remote attackers to overwrite or create arbitrary files via unspecified vectors...

5.8CVSS6AI score0.01388EPSS
SaveExploits0References2
NVD
NVD
•added 2014/03/14 10:55 a.m.•34 views

CVE-2013-5133

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

8.8CVSS5.8AI score0.01744EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2014/03/14 10:00 a.m.•49 views

CVE-2013-5133

Backup in Apple iOS before 7.1 does not properly restrict symlinks, which allows remote attackers to overwrite files during a restore operation via crafted backup data...

5.8AI score0.01744EPSS
SaveExploits1References1
osv_pysec
osv_pysec
•added 2014/03/11 7:37 p.m.•30 views

PYSEC-2014-83

The 1 extractkeysfrompdf and 2 fillpdf functions in pdfext.py in logilab-commons before 0.61.0 allows local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink attack on /tmp/toto.fdf...

4.4CVSS6AI score0.00343EPSS
SaveExploits0References6
Prion
Prion
•added 2014/03/01 12:01 a.m.•38 views

Directory traversal

Directory traversal vulnerability in the CLI job creation hudson/cli/CreateJobCommand.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name...

6.5CVSS6.7AI score0.02576EPSS
SaveExploits0References4Affected Software1
attackerkb
attackerkb
•added 2014/03/01 12:01 a.m.•12 views

CVE-2014-2059

Directory traversal vulnerability in the CLI job creation hudson/cli/CreateJobCommand.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name...

6.5CVSS5.8AI score0.02576EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2014/02/28 5:00 p.m.•58 views

CVE-2014-2059

Directory traversal vulnerability in the CLI job creation hudson/cli/CreateJobCommand.java in Jenkins before 1.551 and LTS before 1.532.2 allows remote authenticated users to overwrite arbitrary files via the job name...

6.2AI score0.02576EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2014/02/27 12:00 a.m.•8 views

PT-2014-4322

Name of the Vulnerable Software and Affected Versions logilab-common versions prior to 0.61.0 Description The issue concerns the extract keys from pdf and fill pdf functions in pdf ext.py, allowing local users to overwrite arbitrary files and possibly have other unspecified impact via a symlink...

8.7CVSS5.9AI score0.00343EPSS
SaveExploits0References24
Tenable Nessus
Tenable Nessus
•added 2014/02/23 12:00 a.m.•37 views

GLSA-201402-20 : KVIrc: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201402-20 KVIrc: Multiple vulnerabilities Multiple vulnerabilities have been discovered in KVIrc. Please review the CVE identifiers referenced below for details. Impact : A remote attacker could possibly execute arbitrary code wit...

10CVSS6.1AI score0.07574EPSS
SaveExploits1References4
Prion
Prion
•added 2014/02/20 4:55 p.m.•23 views

Directory traversal

Multiple directory traversal vulnerabilities in the 1 tarextractglob and 2 tarextractall functions in libtar 1.2.20 and earlier allow remote attackers to overwrite arbitrary files via a .. dot dot in a crafted tar file...

5.8CVSS7.2AI score0.03395EPSS
SaveExploits0References3Affected Software1
Debian CVE
Debian CVE
•added 2014/02/15 11:00 a.m.•38 views

CVE-2011-1837

The lock-counter implementation in utils/mount.ecryptfsprivate.c in ecryptfs-utils before 90 allows local users to overwrite arbitrary files via unspecified vectors...

3.6CVSS8.9AI score0.00379EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2014/02/15 12:00 a.m.•13 views

PT-2014-2216 · Iproute2 · Iproute2

Name of the Vulnerable Software and Affected Versions: iproute2 versions prior to 3.3.0 Description: The issue allows local users to overwrite arbitrary files via a symlink attack on a temporary file used by certain scripts. This can be exploited through the configure script or the...

3.3CVSS6AI score0.00352EPSS
SaveExploits0References8
Rows per page
Query Builder