PT-2017-17298

Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Tool version 12.1 Description A vulnerability in the UpgradeManager could allow an authenticated, remote attacker to write arbitrary files as root on the system due to insufficient input validation. An...

RAR Path Traversal Vulnerability

RAR is a compressed file format. A path traversal vulnerability exists in versions 4.x and 5.x of RAR. A remote attacker can exploit this vulnerability to write arbitrary files with the help of a specially crafted archive file...

CVE-2016-10173: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. dot dot in a TAR archive entry...

PT-2017-9227

Name of the Vulnerable Software and Affected Versions docker2aci versions prior to 0.13.0 Description The issue allows remote attackers to write to arbitrary files via a .. dot dot in the embedded layer data in an image. This is due to a directory traversal vulnerability. Recommendations For...

PT-2017-3538

Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 Description: A Remote Code Execution issue was discovered, related to the dbman service in HPE Intelligent Management Center PLAT. The vulnerability is associated with incorrect...

PT-2016-6522

Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware 8.1 Description The issue affects confidentiality, integrity, and availability. It is reportedly related to a directory traversal vulnerability, which may allow local users with certain permissions to write to arbitrar...

CVE-2016-6405

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

Novell Filr Directory Traversal Vulnerability

Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A directory traversal vulnerability exists in the email-template feature in Novell Filr 1.2 Security Update 2 and earlier and 2.0 Security Update 1 and earlier. A remote attacker could leverage the '...' in the...

PT-2016-2291

Name of the Vulnerable Software and Affected Versions GNU wget versions prior to 1.18 PAN-OS versions prior to 6.1.17 PAN-OS versions prior to 7.0.15 PAN-OS versions prior to 7.1.10 PAN-OS versions prior to 8.0.1 Description The issue is related to errors in security settings, allowing remote...

PT-2015-7022

Name of the Vulnerable Software and Affected Versions Avast versions prior to 150918-0 Description A directory traversal issue allows remote attackers to delete or write to arbitrary files by crafting a specific entry in a ZIP archive. Recommendations For versions prior to 150918-0, update to...

PT-2015-7106

Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.1.4 build 0910 QNAP QTS versions 4.2.x prior to 4.2.0 RC2 build 0910 Description A directory traversal issue exists when AFP is enabled, allowing remote attackers to read or write to arbitrary files by leveraging...

UBUNTU-CVE-2015-5200

The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors...

PT-2015-6014

Name of the Vulnerable Software and Affected Versions Droidware UK Explorer+ File Manager versions prior to 2.3.3 Description The issue allows remote attackers to write to arbitrary files via unspecified vectors, potentially leading to unauthorized data modification or other malicious activities...

Elasticsearch Logstash File Output Plugin Directory Traversal Vulnerability

Elasticsearch Logstash is a set of log analysis and monitoring tools. The tool provides features such as search, processing and management of logs or events. A directory traversal vulnerability in the file output plugin for Elasticsearch Logstash allows remote attackers to write arbitrary files t...

PT-2015-6037

Name of the Vulnerable Software and Affected Versions SysAid Help Desk versions prior to 15.2 Description The issue allows remote attackers to create administrator accounts via a crafted request to "/createnewaccount" or write to arbitrary files via the fileName parameter to "/userentry"...

Lhaplus Directory Traversal Vulnerability

Lhaplus is a set of file compression and decompression software. A directory traversal vulnerability exists in Lhaplus that could allow a remote attacker to construct a specially crafted archive and write arbitrary files to the system...

Libarchive Directory Traversal Vulnerability

libarchive is a multi-format archive and compression library. A directory traversal vulnerability exists in libarchive 3.1.2 and earlier versions of the bsdcpio toolkit. A remote attacker can exploit this vulnerability to write arbitrary files with the full pathname of an archive file...

CVE-2014-9512

rsync 3.1.1 allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path...

PT-2015-4256

Name of the Vulnerable Software and Affected Versions rsync version 3.1.1 Description The issue allows remote attackers to write to arbitrary files via a symlink attack on a file in the synchronization path. Recommendations For rsync version 3.1.1, update to a newer version that contains a fix fo...

PT-2015-5263

Name of the Vulnerable Software and Affected Versions GNU patch versions prior to 2.7.4 Description A Directory Traversal issue allows a remote attacker to write to arbitrary files via a symlink attack in a patch file. This issue exists due to an incomplete fix for a previous problem...