5430 matches found
CVE-2006-6378
BTSaveMySql 1.2 stores sensitive data under the web root with insufficient access control, which allows remote attackers to obtain configuration and save files via direct requests...
CVE-2006-4013
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in 1 DATABLOB-GET and 2 DATABLOB-SAVE...
CVE-2006-4013
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in 1 DATABLOB-GET and 2 DATABLOB-SAVE...
CVE-2006-4013: Improper Limitation of a Pathname to a Restricted Directory
Multiple directory traversal vulnerabilities in Symantec Brightmail AntiSpam SBAS before 6.0.4, when the Control Center is allowed to connect from any computer, allow remote attackers to read and overwrite certain files via directory traversal sequences in 1 DATABLOB-GET and 2 DATABLOB-SAVE...
CVE-2006-3778: Undefined Security Weakness
IBM Lotus Notes 6.0, 6.5, and 7.0 does not properly handle replies to e-mail messages with alternate name users when the 1 "Save As Draft" option is used or 2 a "," comma is inside the "phrase" portion of an address, which can cause the e-mail to be sent to users that were deleted from the To, CC...
Design/Logic Flaw
Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by opening arbitrary files via the "save as" dialog...
CVE-2006-1484
Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by opening arbitrary files via the "save as" dialog...
CVE-2006-1484
Genius VideoCAM NB Driver is affected by a local privilege escalation where privileges are not dropped when saving files. The vulnerability enables local users to gain higher privileges by opening arbitrary files through the driver’s save-as dialog. Affected component is the Genius VideoCAM NB Dr...
CVE-2006-1484: Undefined Security Weakness
Genius VideoCAM NB Driver does not drop privileges when saving files, which allows local users to gain privileges by opening arbitrary files via the "save as" dialog...
The Windows in the DLL Files the basic principle and modified method-vulnerability warning-the black bar safety net
A DLL file is common sense DLL is a Dynamic Link Library acronym meaning Dynamic Link Library. In Windows, many applications are not a complete executable file, which is divided into a number of relatively independent Dynamic Link Library that DLL file, placed in the system. When we execute a...
DEBIAN-CVE-2006-0045
crawl before 4.0.0 does not securely call programs when saving and loading games, which allows local users to gain privileges...
CVE-2006-0045
CVE-2006-0045 affects the crawl game prior to 4.0.0, where saving/loading can trigger insecure execution of programs, allowing local users to gain full privileges. Root cause: the program does not securely call external commands during save/load. Practical impact is local privilege escalation; no...
PT-2006-1134 · Crawl · Crawl
Name of the Vulnerable Software and Affected Versions: crawl versions prior to 4.0.0 Description: The issue allows local users to gain privileges due to insecure calls to programs when saving and loading games. Recommendations: For versions prior to 4.0.0, update to version 4.0.0 or later to...
PT-2005-4099 · Ftgate · Mailsite Express
Name of the Vulnerable Software and Affected Versions: Mailsite Express affected versions not specified Description: The issue allows remote attackers to upload and execute files with executable extensions, such as ASP, by utilizing the compose page feature. Attackers can attach the file and then...
CVE-2005-2864
URBAN 1.5.31 allows local users to overwrite arbitrary files via a symlink attack on the 1 high score or 2 save game files...
CVE-2005-2864: Undefined Security Weakness
URBAN 1.5.31 allows local users to overwrite arbitrary files via a symlink attack on the 1 high score or 2 save game files...
CVE-2004-2434: Undefined Security Weakness
Microsoft Internet Explorer 6.0 SP1 allows remote attackers to cause a denial of service browser crash via a link with "::" colon colon left brace, which triggers a null dereference when the user attempts to save the link using "Save As" and Internet Explorer prepares an error message with an...
CVE-2004-2225
Mozilla Firefox before 0.10.1 allows remote attackers to delete arbitrary files in the download directory via a crafted data: URI that is not properly handled when the user clicks the Save button...
DivX Player 2.6 - '.Skin' File Directory Traversal
source: https://www.securityfocus.com/bid/12332/info DivX Player is reported prone to a directory traversal vulnerability. The issue presents itself when DPS '.dps', archive files are processed. Ultimately an attacker may exploit this issue to save a script or executable file in an arbitrary...