389 matches found
CVE-2020-1904
A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages...
Huawei EulerOS: Security Advisory for perl-Archive-Tar (EulerOS-SA-2020-1998)
The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
librepo: missing path validation in repomd.xml may lead to directory traversal
A flaw was found in librepo. A directory traversal vulnerability was found where it failed to sanitize paths in remote repository metadata. An attacker controlling a remote repository may be able to copy files outside of the destination directory on the targeted system via path traversal. This fl...
CVE-2020-25061
An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...
CVE-2020-25061
An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...
CVE-2020-25061
An issue was discovered on LG mobile devices with Android OS 9 and 10 software on the VZW network. lgeproperty allows property overwrites. The LG ID is LVE-SMP-200016 July 2020...
PT-2020-15921
Name of the Vulnerable Software and Affected Versions LG mobile devices with Android OS 9 and 10 software Description An issue was discovered that allows property overwrites due to the lge property component. Recommendations For Android OS 9 and 10 software, consider restricting access to the lge...
Arbitrary Files Overwrites
firefox is vulnerable to arbitrary file overwrites. Overwriting Firefox settings is possible if there is an installed malicious file picker application as it allows an attacker to overwrite local files...
The vulnerability of the Secdo security incident investigation software arises from incorrect default access settings, which allow attackers to elevate their privileges and re-write system files.
The vulnerability of the Secdo security incident investigation software is related to incorrect default access settings for the folder C:\Programdata\Secdo\Logs. Exploiting this vulnerability allows an attacker to increase their privileges and overwrite system files...
The vulnerability of the Palo Alto Networks Traps software lies in the insecure management of privileges, allowing an attacker to elevate privileges or re-write system files.
The vulnerability of the Palo Alto Networks Traps software lies in the insecure management of privileges. Exploiting this vulnerability could allow an attacker to elevate privileges or overwrite system files...
CVE-2020-13833
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The system area allows arbitrary file overwrites via a symlink attack. The Samsung ID is SVE-2020-17183 June 2020...
CVE-2020-13833
An issue was discovered on Samsung mobile devices with O8.x, P9.0, and Q10.0 software. The system area allows arbitrary file overwrites via a symlink attack. The Samsung ID is SVE-2020-17183 June 2020...
PT-2020-13714
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Description An issue allows arbitrary file overwrites via a symlink attack in the system area. Recommendations For...
The vulnerability of the Connected User Experience and Telemetry Service services for Windows operating systems allows a hacker to overwrite files at will.
The vulnerability of the Connected User Experience and Telemetry Service services in Windows operating systems is related to insecure management of privileges. Exploiting this vulnerability could allow an attacker to re-record files at arbitrary locations using a specially created application...
Privilege escalation
Docker Desktop allows local privilege escalation to NT AUTHORITY\SYSTEM because it mishandles the collection of diagnostics with Administrator privileges, leading to arbitrary DACL permissions overwrites and arbitrary file writes. This affects Docker Desktop Enterprise before 2.1.0.9, Docker...
PYSEC-2020-249
The py-bcrypt module before 0.3 for Python does not properly handle concurrent memory access, which allows attackers to bypass authentication via multiple authentication requests, which trigger the password hash to be overwritten...
CVE-2018-12476
Relative Path Traversal vulnerability in obs-service-tarscm of SUSE Linux Enterprise Server 15; openSUSE Factory allows remote attackers with control over a repository to overwrite files on the machine of the local user if a malicious service is executed. This issue affects: SUSE Linux Enterprise...
Design/Logic Flaw
On BIG-IP versions 15.0.0-15.0.1, 14.1.0.2-14.1.2.2, 14.0.0.5-14.0.1, 13.1.1.5-13.1.3.1, 12.1.4.1-12.1.5, 11.6.4-11.6.5, and 11.5.9-11.5.10, the access controls implemented by scp.whitelist and scp.blacklist are not properly enforced for paths that are symlinks. This allows authenticated users wi...