Lucene search
K

1462 matches found

NVD
NVD
added 2007/10/09 10:17 p.m.9 views

CVE-2007-5320

Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to 1 delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control PegasusImaging.ActiveX.ThumnailXpress1.dll or 2 overwrite arbitrary files via the CompactFile...

4CVSS7AI score0.05919EPSS
Exploits1References9
Cvelist
Cvelist
added 2007/10/09 10:0 p.m.14 views

CVE-2007-5320

Multiple absolute path traversal vulnerabilities in Pegasus Imaging ImagXpress 8.0 allow remote attackers to 1 delete arbitrary files via the CacheFile attribute in the ThumbnailXpres.1 ActiveX control PegasusImaging.ActiveX.ThumnailXpress1.dll or 2 overwrite arbitrary files via the CompactFile...

7AI score0.05919EPSS
Exploits1References9
Prion
Prion
added 2007/10/04 9:17 p.m.13 views

Design/Logic Flaw

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

3.3CVSS6.8AI score0.00038EPSS
Exploits1References5Affected Software1
OSV
OSV
added 2007/10/04 9:17 p.m.1 views

DEBIAN-CVE-2007-5207

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

3.3CVSS6.7AI score0.00038EPSS
Exploits1References1
UbuntuCve
UbuntuCve
added 2007/10/04 9:17 p.m.24 views

CVE-2007-5207

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

3.3CVSS6AI score0.00038EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2007/10/04 9:0 p.m.18 views

CVE-2007-5207

guilt 0.27 allows local users to overwrite arbitrary files via a symlink attack on a guilt.log.PID temporary file...

3.3CVSS6.2AI score0.00038EPSS
Exploits1
OSV
OSV
added 2007/09/24 12:17 a.m.1 views

DEBIAN-CVE-2007-3916

The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file...

4.4CVSS6.7AI score0.00041EPSS
Exploits0References1
UbuntuCve
UbuntuCve
added 2007/09/24 12:17 a.m.19 views

CVE-2007-3916

The main function in skkdic-expr.c in SKK Tools 1.2 allows local users to overwrite or delete arbitrary files via a symlink attack on a skkdic$PID temporary file...

4.4CVSS6AI score0.00041EPSS
Exploits0References1
NVD
NVD
added 2007/08/30 10:17 p.m.14 views

CVE-2007-4134

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...

6.8CVSS6.5AI score0.03412EPSS
Exploits0References17
Prion
Prion
added 2007/08/30 10:17 p.m.16 views

Directory traversal

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...

6.8CVSS6.6AI score0.03412EPSS
Exploits0References17Affected Software1
Cvelist
Cvelist
added 2007/08/30 10:0 p.m.20 views

CVE-2007-4134

Directory traversal vulnerability in extract.c in star before 1.5a84 allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...

6.4AI score0.03412EPSS
Exploits0References17
Cvelist
Cvelist
added 2007/08/28 6:0 p.m.14 views

CVE-2007-3846

Directory traversal vulnerability in Subversion before 1.4.5, as used by TortoiseSVN before 1.4.5 and possibly other products, when run on Windows-based systems, allows remote authenticated users to overwrite and create arbitrary files via a ..\ dot dot backslash sequence in the filename, as stor...

6.2AI score0.01579EPSS
Exploits0References13
Prion
Prion
added 2007/08/28 1:17 a.m.100 views

Directory traversal

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

6.8CVSS9.2AI score0.89361EPSS
Exploits4References6Affected Software1
OSV
OSV
added 2007/08/28 1:17 a.m.1 views

UBUNTU-CVE-2007-4559

Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote attackers to overwrite arbitrary files via a .. dot dot sequence in filenames in a TAR archive, a related issue to CVE-2001-1267...

9.8CVSS6.9AI score0.89361EPSS
Exploits3References4
Prion
Prion
added 2007/08/25 12:17 a.m.33 views

Directory traversal

Directory traversal vulnerability in the containsdotdot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...

6.8CVSS6.4AI score0.0838EPSS
Exploits1References38Affected Software1
NVD
NVD
added 2007/08/25 12:17 a.m.10 views

CVE-2007-4131

Directory traversal vulnerability in the containsdotdot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...

6.8CVSS6.3AI score0.0838EPSS
Exploits1References38
Snyk
Snyk
added 2007/08/25 12:17 a.m.1 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal. Directory traversal vulnerability in the containsdotdot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directo...

6.8CVSS7.1AI score0.0838EPSS
Exploits1References2
Cvelist
Cvelist
added 2007/08/25 12:0 a.m.22 views

CVE-2007-4131

Directory traversal vulnerability in the containsdotdot function in src/names.c in GNU tar allows user-assisted remote attackers to overwrite arbitrary files via certain //.. slash slash dot dot sequences in directory symlinks in a TAR archive...

7.8AI score0.0838EPSS
Exploits1References38
OSV
OSV
added 2007/08/21 9:17 p.m.1 views

DEBIAN-CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

7.2CVSS6.7AI score0.00091EPSS
Exploits1References1
Debian CVE
Debian CVE
added 2007/08/21 9:0 p.m.24 views

CVE-2007-4460

The RenderV2ToFile function in tagfile.cpp in id3lib aka libid3 3.8.3 allows local users to overwrite arbitrary files via a symlink attack on a temporary file whose name is constructed from the name of a file being tagged...

7.2CVSS6.1AI score0.00091EPSS
Exploits1
Rows per page
Query Builder