287 matches found
CVE-2021-1385
A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory traversal attacks and read and write files on the underlying operating system or host system. This vulnerability occurs because the devic...
PT-2021-3267
Name of the Vulnerable Software and Affected Versions IBM DB2 for Linux, UNIX and Windows includes DB2 Connect Server versions 9.7, 10.1, 10.5, 11.1, and 11.5 Description The issue is related to weak file permissions, allowing a local user to read and write specific files. It is also associated...
CVE-2021-1259: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in the web-based management interface of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to conduct path traversal attacks and obtain write access to sensitive files on an affected system. The vulnerability is due to insufficient validation of HTTP...
PT-2021-7659
Name of the Vulnerable Software and Affected Versions ASUS RT-AC68U router firmware versions prior to 3.0.0.4.386.41634 Description The issue is related to an Incorrect Access Control problem in the Cloud Disk feature of the ASUS RT-AC68U router firmware. This problem allows remote attackers to...
Umbraco 路径遍历漏洞
Umbraco is an open source content management system CMS based on ASP.NET technology. A path traversal vulnerability exists in Umbraco 8.9.1 and earlier versions during package installation. An attacker can use this vulnerability to write arbitrary files outside of the site home directory and...
CVE-2020-9301
Nolan Ray from Apple Information Security identified a security vulnerability in Spinnaker, all versions prior to version 1.23.4, 1.22.4 or 1.21.5. The vulnerability exists within the handling of SpEL expressions that allows an attacker to read and write arbitrary files within the orca container...
PT-2020-5884
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 10.15.6 Security Update 2020-004 Mojave versions prior to the update Security Update 2020-004 High Sierra versions prior to the update Description: A logic issue was addressed with improved state management. Processing...
VulnCheck KEV: CVE-2021-25337
Samsung mobile devices contain an improper access control vulnerability in clipboard service which allows untrusted applications to read or write arbitrary files. This vulnerability was chained with CVE-2021-25369 and CVE-2021-25370...
PT-2020-13852
Name of the Vulnerable Software and Affected Versions Ozeki NG SMS Gateway versions prior to 4.17.7 Description An issue was discovered in the Autoreply module's Script Name where a path traversal vulnerability allows an attacker to write to or overwrite arbitrary files with arbitrary content,...
PT-2020-19582
Name of the Vulnerable Software and Affected Versions Metasploit Framework affected versions not specified Description The issue concerns a relative path traversal vulnerability in the untar method of the "auxiliary/admin/http/telpho10 credential dump" module. This vulnerability can be exploited ...
CVE-2020-8159: Improper Limitation of a Pathname to a Restricted Directory
There is a vulnerability in actionpackpage-caching gem v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view...
CVE-2020-5554: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write arbitrary files via unspecified vectors...
PT-2020-1388
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Collaboration Endpoint CE Software affected versions not specified Cisco TelePresence Codec TC Software affected versions not specified Cisco RoomOS Software affected versions not specified Description A vulnerability in the...
PT-2019-6385
Name of the Vulnerable Software and Affected Versions Git for Visual Studio affected versions not specified Description A tampering issue exists due to improper handling of virtual drive paths by Git for Visual Studio. This issue may allow a remote attacker to write arbitrary files to the system...
The numerous vulnerabilities in the API interface of the WADashboard component of the Advantech WebAccess software allow a perpetrator to write or overwrite any files in the file system.
The multiple vulnerabilities of the API interface of the WADashboard component in the Advantech WebAccess remote monitoring software are related to deficiencies in path validation before its use in file operations. Exploiting these vulnerabilities could allow a malicious actor to read arbitrary...
CVE-2019-18212
XMLLanguageService.java in XML Language Server aka lsp4xml before 0.9.1, as used in Red Hat XML Language Support aka vscode-xml before 0.9.1 for Visual Studio and other products, allows a remote attacker to write to arbitrary files via Directory Traversal...
The vulnerability of the Cisco RoomOS operating system, related to permission handling errors, allows a intruder to write arbitrary files to the device’s file system.
The vulnerability of the Cisco RoomOS operating system is related to permission handling errors. Exploiting this vulnerability allows an attacker to write arbitrary files to the device’s file system with root privileges...
CVE-2019-14751
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ dot dot slash in an NLTK package ZIP archive that is mishandled during extraction...
CVE-2019-10185
It was found that icedtea-web up to and including 1.7.2 and 1.8.2 was vulnerable to a zip-slip attack during auto-extraction of a JAR file. An attacker could use this flaw to write files to arbitrary locations. This could also be used to replace the main running application and, possibly, break o...