CVE-2018-7102: Improper Limitation of a Pathname to a Restricted Directory

A security vulnerability in HPE Intelligent Management Center iMC PLAT E0506P09, createFabricAutoCfgFile could be remotely exploited via directory traversal to allow remote arbitrary file modification...

[SECURITY] [DSA 4285-1] sympa security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4285-1 [email protected] https://www.debian.org/security/ Salvatore Bonaccorso September 05, 2018 https://www.debian.org/security/faq -...

PT-2018-17907

Name of the Vulnerable Software and Affected Versions HPE Intelligent Management Center iMC version PLAT E0506P09 Description A security issue in HPE Intelligent Management Center iMC allows remote arbitrary file modification via directory traversal. This can be exploited remotely. The...

CVE-2018-7073

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

Design/Logic Flaw

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

CVE-2018-7073: Exposure of Resource to Wrong Sphere

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24...

PT-2018-17888

Name of the Vulnerable Software and Affected Versions HPE Moonshot Provisioning Manager versions prior to 1.24 Description A local arbitrary file modification issue was identified. Recommendations For versions prior to 1.24, update to version 1.24 or later to resolve the issue...

CVE-2017-6690: Improper Input Validation

A vulnerability in the file check operation of Cisco ASR 5000 Series Aggregated Services Routers running the Cisco StarOS operating system could allow an authenticated, remote attacker to overwrite or modify arbitrary files on an affected system. More Information: CSCvd73726. Known Affected...

Unauthorized Modification of Arbitrary Files Vulnerability in 'DataBaseBackup_Edit.aspx' of MicroXia E-learning Platform

Micro Xia Online Learning Platform is an online education system based on B/S architecture. An unauthorized modification of arbitrary files vulnerability exists in 'DataBaseBackupEdit.aspx' of the Weixia Online Learning Platform. An attacker using this vulnerability to modify the db.config file i...

CVE-2015-8258: Improper Neutralization of Special Elements in Output Used by a Downstream Component

AXIS Communications products with firmware through 5.80.x allow remote attackers to modify arbitrary files as root via vectors involving Open Script Editor, aka a "resource injection vulnerability."...

Cisco Iox Arbitrary File Modification Vulnerability

Cisco IOx is a suite of applications from Cisco USA that provide unified hosting capabilities for Cisco's IoT network infrastructure. A security vulnerability in the web framework code in the CAF component of Cisco IOx can be exploited by remote attackers to upload malicious data messages to writ...

PT-2017-16146

Name of the Vulnerable Software and Affected Versions Cisco IOx versions 1.0.0.0 through 1.1.0.0 Description A vulnerability in the Cisco application-hosting framework component could allow an authenticated, remote attacker to write or modify arbitrary files in the virtual instance running on the...

CVE-2017-5618

GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions...

CVE-2017-5618

GNU screen before 4.5.1 allows local users to modify arbitrary files and consequently gain root privileges by leveraging improper checking of logfile permissions...

Vulnerability of Mac OS X and iOS operating systems, allowing attackers to modify arbitrary files

The vulnerability of the libarchive component in Mac OS X and iOS systems is related to an incorrect definition of links before accessing files. Exploiting this vulnerability allows a malicious individual to modify arbitrary files by manipulating symlinks...

Vulnerability of Mac OS X and iOS operating systems, allowing attackers to modify arbitrary files

The vulnerability of the libarchive component in Mac OS X and iOS systems is related to an incorrect definition of the reference before accessing a file. Exploiting this vulnerability allows a remote attacker to modify any files using a specially crafted archive...

PT-2017-1325

Name of the Vulnerable Software and Affected Versions iOS versions prior to 10.1 macOS versions prior to 10.12.1 tvOS versions prior to 10.0.1 watchOS versions prior to 3.1 Description The issue involves the libarchive component and is related to incorrect link resolution before file access. This...

CVE-2016-9210: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the Cisco Unified Reporting upload tool accessed via the Cisco Unified Communications Manager could allow an unauthenticated, remote attacker to modify arbitrary files on the file system. More Information: CSCvb61698. Known Affected Releases: 11.51.11007.2. Known Fixed Releases...

SAP TREX Arbitrary File Modification Vulnerability

SAP TREX is a search engine from SAP for the SAP NetWeaver integrated technology platform. An arbitrary file modification vulnerability exists in SAP TREX, which can be exploited by a remote attacker to read and write arbitrary files on the file system...

IBM Security Privileged Identity Manager Virtual Appliance Arbitrary File Modification Vulnerability

IBM Security Privileged Identity Manager is an identity management product within IBM Identity Governance and Management, an identity governance solution from IBM USA, that protects, automates, and audits the use of privileged identities to help defend against insider threats and improve security...