CVE-2021-35968

The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system directory thru Path Traversal with users’ privileges...

LearningDigital Orca HCM digital learning platform 路径遍历漏洞

The LearningDigital Orca HCM digital learning platform is a digital learning platform from China-based LearningDigital. A path traversal vulnerability exists in the LearningDigital Orca HCM digital learning platform, which stems from the platform's directory listing page parameters not properly...

Dell EMC PowerStore 安全漏洞

Dell EMC PowerStore is a storage device from Dell, Inc. A security vulnerability exists in versions of Dell EMC PowerStore prior to 1.0.3.0.5.x. A locally authenticated attacker could exploit the vulnerability to cause information disclosure in certain system directories...

Directory Traversal

gnome-autoar is vulnerable to information disclosure. The autoar-extractor.c module allows an attacker to exploit a directory traversal vulnerability during extraction as it lacks symlink validation, resulting in writing of files in arbitrary system directories...

Design/Logic Flaw

A vulnerability in the TCL Android Smart TV series V8-R851T02-LF1 V295 and below and V8-T658T01-LF1 V373 and below by TCL Technology Group Corporation allows a local unprivileged attacker, such as a malicious App, to read & write to the /data/vendor/tcl, /data/vendor/upgrade, and...

CVE-2019-7305

Information Exposure vulnerability in eXtplorer makes the /usr/ and /etc/extplorer/ system directories world-accessible over HTTP. Introduced in the Makefile patch file debian/patches/debian-changes-2.1.0b6+dfsg-1 or debian/patches/adds-a-makefile.patch, this can lead to data leakage, information...

The vulnerability of the Cisco AnyConnect Secure Mobility Client software installer for Windows operating systems allows a hacker to copy arbitrary files into system-level directories.

The vulnerability of the Cisco AnyConnect Secure Mobility Client software installer for Windows operating systems is related to errors in the mechanism for checking the path to dynamically linked libraries. Exploiting this vulnerability could allow an attacker to copy arbitrary files into...

CVE-2020-3153

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

Design/Logic Flaw

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

CVE-2020-3153 Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

Cisco AnyConnect Secure Mobility Client for Windows Uncontrolled Search Path Vulnerability

A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy user-supplied files to system level directories with system level privileges. The vulnerability is due to the incorrect handling of directory paths...

PT-2020-1762

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client for Windows versions prior to 4.8.02042 Description A vulnerability in the installer component of Cisco AnyConnect Secure Mobility Client for Windows could allow an authenticated local attacker to copy...

Insecure Temporary Directory Creation

rply creates temporary directory in an insecure manner. It uses tempfile.gettempdir to create /tmp directories per user, allowing any local user to perform symlink or hardlink attacks which can result in system directories being overwritten and causing a denial of service condition...

CVE-2019-12777

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They replace secure and protected directory permissions set as default by the underlying operating system with highly insecure read, write, and execute directory...

CVE-2019-12777

An issue was discovered on the ENTTEC Datagate MK2, Storm 24, Pixelator, and E-Streamer MK2 with firmware 70044update05032019-482. They replace secure and protected directory permissions set as default by the underlying operating system with highly insecure read, write, and execute directory...

The vulnerability of the HTTP web server of the Cisco Prime Infrastructure monitoring and network equipment management system allows a hacker to download and execute any arbitrary file.

The vulnerability of the HTTP web server of the Cisco Prime Infrastructure monitoring and network equipment management system is related to access control errors for system directories. Exploiting this vulnerability allows a malicious actor to download and execute any arbitrary file remotely...

CVE-2018-15379 Cisco Prime Infrastructure Arbitrary File Upload and Command Execution Vulnerability

A vulnerability in which the HTTP web server for Cisco Prime Infrastructure PI has unrestricted directory permissions could allow an unauthenticated, remote attacker to upload an arbitrary file. This file could allow the attacker to execute commands at the privilege level of the user prime. This...

Directory traversal

Mate 9 smartphones with software MHA-AL00AC00B125 have a directory traversal vulnerability in Push module. Since the system does not verify the file name during decompression, system directories are traversed. It could be exploited to cause the attacker to replace files and impact the service...

MODX Revolution Directory Traversal Vulnerability (CNVD-2017-06899)

MODX Revolution is a PHP-based open source content management system CMS from the U.S. company MODX. The system supports online collaboration, search engine optimization SEO, add-ons and more. A directory traversal vulnerability exists in MODX Revolution version 2.5.7. The vulnerability arises du...

p7zip symbolic link directory traversal vulnerability

7-Zip is a free compression software with high compression ratio. A directory traversal vulnerability exists in p7zip symbolic links, due to the fact that 7-Zip extracts symbolic links when extracting archive files. Allowing an attacker to exploit this vulnerability could construct a malicious...