17476 matches found
CVE-2021-25346
A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution...
CVE-2021-25346
A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution...
CVE-2021-25346
A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution...
CVE-2021-25346
CVE-2021-25346 affects Samsung quram library, with vulnerable versions prior to SMR Jan-2021 Release 1. The root cause is an arbitrary memory overwrite that can lead to arbitrary code execution. Publicly documented impact aligns with memory corruption in quram components; Samsung has released sec...
CVE-2021-25346
A possible arbitrary memory overwrite vulnerabilities in quram library version prior to SMR Jan-2021 Release 1 allow arbitrary code execution...
CVE-2021-26029
An issue was discovered in Joomla! 1.6.0 through 3.9.24. Inadequate filtering of form contents could allow to overwrite the author field...
EulerOS Virtualization 3.0.6.6 : tboot (EulerOS-SA-2021-1521)
According to the version of the tboot package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - Certain function pointers in Trusted Boot tboot through 1.9.6 are not validated and can cause arbitrary code execution, which allows...
三星 Samsung quram 缓冲区错误漏洞
Samsung quram is a cell phone application from Samsung South Korea. It provides a translation function. A security vulnerability exists in the quram library version prior to SMR Jan-2021 Release 1, which can be exploited by an attacker to overwrite arbitrary memory and allow arbitrary code...
PT-2021-16922 · Joomla · Joomla!
Name of the Vulnerable Software and Affected Versions: Joomla! versions 1.6.0 through 3.9.24 Description: An issue was discovered in Joomla! where inadequate filtering of form contents could allow the overwrite of the author field. Recommendations: For Joomla! versions 1.6.0 through 3.9.24, updat...
CVE-2021-26029
An issue was discovered in Joomla! 1.6.0 through 3.9.24. Inadequate filtering of form contents could allow to overwrite the author field...
CVE-2021-25833
A file extension handling issue was found in server module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file extension is controlled by an attacker through the request data and leads to arbitrary file overwriting. Using this vulnerability, a remote attacker can obtain remote code executi...
CVE-2021-27225
In Dataiku DSS before 8.0.6, insufficient access control in the Jupyter notebooks integration allows users who have coding permissions to read and overwrite notebooks in projects that they are not authorized to access...
Dockerhub DocumentServer 路径遍历漏洞
ONLYOFFICE Document Server is a free collaborative online office suite that includes viewers and editors for text, spreadsheets and presentations. ONLYOFFICE Document Server suffers from a file extension handling vulnerability that can be exploited by an attacker requesting data to control file...
Input validation
User can overwrite Security Code NV item without knowing current SPC due to improper validation of SPC code setting and device lock in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon IoT, Snapdragon Mobile, Snapdragon...
CVE-2020-13549
An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite service executables and execute arbitrary code with privileges of user set to run the service or...
PT-2021-9627 · Spytech · Sytech Xl Reporter
Name of the Vulnerable Software and Affected Versions: Sytech XL Reporter version 14.0.1 Description: An exploitable local privilege elevation issue exists in the file system permissions of the install directory. Depending on the chosen vector, an attacker can overwrite service executables and...
Arbitrary file deletion
DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn't check if it's being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page e.g., with...
CVE-2021-27197
DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn't check if it's being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page e.g., with...
CVE-2021-20651
CVE-2021-20651 describes a directory traversal vulnerability in ELECOM File Manager (all versions). The weakness allows a remote attacker to create or overwrite arbitrary files within directories that the application can access, via unspecified vectors. Connected sources corroborate impact statem...
CVE-2020-8027
A Insecure Temporary File vulnerability in openldap2 of SUSE Linux Enterprise Server 15-LTSS, SUSE Linux Enterprise Server for SAP 15; openSUSE Leap 15.1, openSUSE Leap 15.2 allows local attackers to overwrite arbitrary files and gain access to the openldap2 configuration This issue affects: SUSE...