PT-2017-17075

Name of the Vulnerable Software and Affected Versions NTP versions prior to 4.2.8p10 NTP versions 4.3.x prior to 4.3.94 Description A stack-based buffer overflow issue exists in the Windows installer for NTP, allowing local users to have an unspecified impact via an application path on the comman...

CVE-2016-5253

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

CVE-2016-5253

Mozilla Firefox updater on Windows (pre-48.0) is affected. The Updater can be abused via the callback application-path parameter and a hard link to write arbitrary files (local privilege escalation). A fix is to upgrade to Firefox 48.0 or later; apply vendor advisories for the exact patched versi...

CVE-2016-5253

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

CVE-2016-5253: Undefined Security Weakness

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

PT-2016-2530

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 48.0 Description The issue is related to the Updater component in Mozilla Firefox, which allows local users to write to arbitrary files. This is achieved through vectors involving the application-path paramete...

Localize: Full Path Disclosure (2)

During the import of an XML file,I edited the "file" to "url" for importing XML's through URL.So it became: html And then I tried to import a random XML file.I tried with this: http://www.swarthmore.edu/libraries.xml It was not a valid XML file.And after the importing it showed the following erro...

CVE-2007-0607

W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...

CVE-2007-0607

W-Agora Web-Agora 4.2.1, when registerglobals is enabled, stores globals.inc under the web document root with insufficient access control, which allows remote attackers to obtain application path information via a direct request...