Elasticsearch Logstash File Output Plugin Directory Traversal Vulnerability

Elasticsearch Logstash is a set of log analysis and monitoring tools. The tool provides features such as search, processing and management of logs or events. A directory traversal vulnerability in the file output plugin for Elasticsearch Logstash allows remote attackers to write arbitrary files t...

PT-2015-6037

Name of the Vulnerable Software and Affected Versions SysAid Help Desk versions prior to 15.2 Description The issue allows remote attackers to create administrator accounts via a crafted request to "/createnewaccount" or write to arbitrary files via the fileName parameter to "/userentry"...

Lhaplus Directory Traversal Vulnerability

Lhaplus is a set of file compression and decompression software. A directory traversal vulnerability exists in Lhaplus that could allow a remote attacker to construct a specially crafted archive and write arbitrary files to the system...

Libarchive Directory Traversal Vulnerability

libarchive is a multi-format archive and compression library. A directory traversal vulnerability exists in libarchive 3.1.2 and earlier versions of the bsdcpio toolkit. A remote attacker can exploit this vulnerability to write arbitrary files with the full pathname of an archive file...

CVE-2014-9512

rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path...

PT-2015-4256

Name of the Vulnerable Software and Affected Versions rsync version 3.1.1 Description The issue allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path. Recommendations For rsync version 3.1.1, update to a newer version that contains a fix fo...

PT-2015-5263

Name of the Vulnerable Software and Affected Versions GNU patch versions prior to 2.7.4 Description A Directory Traversal issue allows a remote attacker to write to arbitrary files via a symlink attack in a patch file. This issue exists due to an incomplete fix for a previous problem...

DEBIAN-CVE-2015-1193

Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a 1 full pathname or 2 .. dot dot in an archive...

PT-2015-5154

Name of the Vulnerable Software and Affected Versions kgb version 1.0b4 Description The issue allows remote attackers to write to arbitrary files via a full pathname in a crafted archive, due to an absolute path traversal vulnerability. Recommendations For version 1.0b4, consider restricting acce...

CVE-2015-0552

Directory traversal vulnerability in the gcabfolderextract function in libgcab/gcab-folder.c in gcab 0.4 allows remote attackers to write to arbitrary files via crafted path in a CAB file, as demonstrated by "\tmp\moo."...

PT-2014-7016

Name of the Vulnerable Software and Affected Versions ZOHO ManageEngine OpManager versions 11.4 and earlier Description A directory traversal issue exists in the FileCollector servlet, allowing remote attackers to write and execute arbitrary files. This is achieved by using a .. dot dot in the...

PT-2014-5458

Name of the Vulnerable Software and Affected Versions Pidgin versions prior to 2.10.10 Description The issue is related to an absolute path traversal vulnerability in the untar block function. This vulnerability allows remote attackers to write to arbitrary files via a drive name in a tar archive...

PT-2014-1952

Name of the Vulnerable Software and Affected Versions Visual Mining NetChart affected versions not specified Description The issue is related to a directory traversal vulnerability in the saveFile.jsp file of the development installation in Visual Mining NetChart. This vulnerability allows remote...

PT-2014-6419

Name of the Vulnerable Software and Affected Versions Check MK versions prior to 1.2.4p4 Check MK version 1.2.5 prior to 1.2.5i4 Description The issue allows remote authenticated users to write check mk config files .mk files to arbitrary locations. This is related to vectors involving row...

PT-2014-4787

Name of the Vulnerable Software and Affected Versions DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC versions prior to 13.1.10 DevExpress ASPxFileManager Control for ASP.NET WebForms and MVC versions 13.2.x prior to 13.2.9 Description The issue allows remote authenticated users t...

CVE-2014-0471

Directory traversal vulnerability in the unpacking functionality in dpkg before 1.15.9, 1.16.x before 1.16.13, and 1.17.x before 1.17.8 allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting."...

PT-2014-1776

Name of the Vulnerable Software and Affected Versions dpkg versions 1.15.9 and earlier, 1.16.x before 1.16.13, 1.17.x before 1.17.8 Description The issue allows remote attackers to write arbitrary files via a crafted source package, related to "C-style filename quoting." This can lead to a...

CVE-2013-4510

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report...

CVE-2012-1617

Directory traversal vulnerability in combine.php in OSClass before 2.3.6 allows remote attackers to read and write arbitrary files via a .. dot dot in the type parameter. NOTE: this vulnerability can be leveraged to upload arbitrary files...

PT-2012-6314

Name of the Vulnerable Software and Affected Versions OpenStack Compute Nova versions 2012.1 through 2012.2 Description A directory traversal issue exists when OpenStack Compute Nova is used over libvirt-based hypervisors. This allows remote authenticated users to write arbitrary files to the dis...