Album Lock v4.0 iOS - Directory Traversal Vulnerability

Document Title: =============== Album Lock v4.0 iOS - Directory Traversal Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2033 Release Date: ============= 2017-02-20 Vulnerability Laboratory ID VL-ID: ====================================...

CVE-2016-2205

Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote...

Directory traversal

Directory traversal vulnerability in the file-download configuration file in the management console in Symantec Workspace Streaming SWS 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 and Symantec Workspace Virtualization SWV 7.5.x before 7.5 SP1 HF9 and 7.6.0 before 7.6 HF5 allows remote...

Baumer VeriSens Application Suite Buffer Overflow Vulnerability

The Baumer Application Suite enables users to realize fast and simple image processing tasks. A buffer overflow vulnerability exists in Baumer VeriSens Application Suite due to a boundary error in baselibs.dll. A buffer overflow error will occur when a user opens a specially crafted .APP file. An...

CVE-2014-2130

Cisco Secure Access Control Server ACS provides an unintentional administration web interface based on Apache Tomcat, which allows remote authenticated users to modify application files and configuration files, and consequently execute arbitrary code, by leveraging administrative privileges, aka...

Authentication flaw

The Real Time Monitoring Tool RTMT web application in Cisco Unified Communications Manager Unified CM 10.01 and earlier does not properly enforce authentication requirements, which allows remote attackers to read application files via a direct request to a URL, aka Bug ID CSCum46495...

Directory traversal

Directory traversal vulnerability in Apache Wicket 1.4.x before 1.4.20 and 1.5.x before 1.5.5 allows remote attackers to read arbitrary web-application files via a relative pathname in a URL for a Wicket resource that corresponds to a null package...

CVE-2012-1089

CVE-2012-1089 affects Apache Wicket 1.4.x (before 1.4.20) and 1.5.x (before 1.5.5). A directory traversal flaw allows remote attackers to read arbitrary files by using a relative path in a URL for a Wicket resource that corresponds to a null package. The issue impacts web applications using vulne...

Buffer overflow

Microsoft .NET Framework 1.1 SP1, 2.0 SP1 and SP2, 3.5, 3.5 SP1, 3.5.1, and 4.0, as used for ASP.NET in Microsoft Internet Information Services IIS, provides detailed error codes during decryption attempts, which allows remote attackers to decrypt and modify encrypted View State aka VIEWSTATE for...

Autodesk Maya code execution

It's possible to embed scripts into application files...

CVE-2007-4649

MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1 use weak permissions Everyone:Full Control for their installation directory trees, which allows local users to gain privileges by replacing application files, as demonstrated by traysser.exe...

CVE-2007-4649

CVE-2007-4649 impacts MicroWorld eScan Virus Control 9.0.722.1, Anti-Virus 9.0.722.1, and Internet Security 9.0.722.1. The underlying issue is weak permissions (Everyone: Full Control) on installation directory trees, enabling local users to replace application files (e.g., traysser.exe) and pote...