DEBIAN-CVE-2015-5705

Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename...

CVE-2015-5705

Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename...

CVE-2015-5705: Improper Link Resolution Before File Access

Argument injection vulnerability in devscripts before 2.15.7 allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename...

PT-2017-6886

Name of the Vulnerable Software and Affected Versions devscripts versions prior to 2.15.7 Description The issue allows remote attackers to write to arbitrary files via a crafted symlink and crafted filename. Recommendations For versions prior to 2.15.7, update to version 2.15.7 or later to resolv...

Arbitrary file write vulnerability in MetInfo version 5.3.18 physical.php

MetInfo is a Content Management System CMS developed using PHP and Mysql. An arbitrary file write vulnerability exists in MetInfo version 5.3.18 in physical.php. An attacker can exploit the CSRF vulnerability to remotely write arbitrary content and gain server privileges...

PHPCMS V9.6.3 CSRF Vulnerability and Arbitrary File Write Vulnerability in the Backend

PHPCMS is a web content management system based on PHP and Mysql architecture. PHPcms V9.6.3 version of the backend exists CSRF vulnerability and arbitrary file write vulnerability. Attackers can use this vulnerability to remotely write Trojan horse files to obtain web server administrative...

XYHCMS \App\Runtime\Data\config\site.php page has an arbitrary file write vulnerability

Xing Yunhai CMS XYHcms is a completely open source CMS content management system. XYHCMS \App\Runtime\Data\config\site.php page has an arbitrary file write vulnerability. Attackers use this vulnerability to obtain server privileges by writing Webshell...

CVE-2017-10952: Protection Mechanism Failure

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the save...

CVE-2015-3653: Improper Access Control

Aruba Networks ClearPass Policy Manager before 6.4.7 and 6.5.x before 6.5.2 allows remote authenticated administrators to write to arbitrary files within the underlying operating system and consequently cause a denial of service or gain privileges by leveraging incorrect permission checking...

PT-2017-6690

Name of the Vulnerable Software and Affected Versions Aruba Networks ClearPass Policy Manager versions prior to 6.4.7 Aruba Networks ClearPass Policy Manager versions 6.5.x prior to 6.5.2 Description The issue allows remote authenticated administrators to write to arbitrary files within the...

CVE-2015-3211

php-fpm allows local users to write to or create arbitrary files via a symlink attack...

PT-2017-6885

Name of the Vulnerable Software and Affected Versions mktexlsr versions as packaged in texlive before revision 36626 and after revision 36855 Description The issue allows local users to write to arbitrary files via a symlink attack. This problem exists due to the reversion of a previous fix...

CVE-2015-5701: Improper Link Resolution Before File Access

mktexlsr revision 36855, and before revision 36626 as packaged in texlive allows local users to write to arbitrary files via a symlink attack. NOTE: this vulnerability exists due to the reversion of a fix of CVE-2015-5700...

CVE-2015-3211: Improper Link Resolution Before File Access

php-fpm allows local users to write to or create arbitrary files via a symlink attack...

CVE-2015-1324: Undefined Security Weakness

Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root...

CVE-2015-5700: Improper Link Resolution Before File Access

mktexlsr revision 22855 through revision 36625 as packaged in texlive allows local users to write to arbitrary files via a symlink attack...

CVE-2015-1325: Concurrent Execution using Shared Resource with Improper Synchronization

Race condition in Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files...

CVE-2015-1395: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in GNU patch versions which support Git-style patching before 2.7.3 allows remote attackers to write to arbitrary files with the permissions of the target user via a .. dot dot in a diff file name...

CVE-2017-12074: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the SYNO.DNSServer.Zone.MasterZoneConf in Synology DNS Server before 2.2.1-3042 allows remote authenticated attackers to write arbitrary files via the domainname parameter...

PT-2017-12338

Name of the Vulnerable Software and Affected Versions Synology DNS Server versions prior to 2.2.1-3042 Description The issue allows remote authenticated attackers to write arbitrary files via the domain name parameter in the SYNO.DNSServer.Zone.MasterZoneConf. This can be exploited by sending a...