10268 matches found
File upload vulnerability in SchoolCMS backend ThemeController.class.php
SchoolCMS is an open source faculty management system. SchoolCMS v2.3.1 version ThemeController.class.php and SiteController.class.ph Upload function in the file upload vulnerability, remote attackers can use the theme function in the background, to perform arbitrary file write operations to obta...
Cisco DPC3939 Firmware Arbitrary File Write Vulnerability
Cisco DPC3939 is a wireless voice gateway product from Cisco USA. A security vulnerability exists in the Cisco DPC3939 firmware. It allows a remote attacker to write arbitrary data to a known /var/tmp/sess path by exploiting the operation of the UI exploit mode device...
CVE-2015-3149
The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack...
PT-2017-12027
Name of the Vulnerable Software and Affected Versions SAP TREX version 7.10 Description The issue allows remote attackers to read arbitrary files via an fget command or write to arbitrary files and consequently execute arbitrary code via an fdir command. Recommendations For SAP TREX version 7.10,...
CVE-2015-3149: Improper Link Resolution Before File Access
The Hotspot component in OpenJDK8 as packaged in Red Hat Enterprise Linux 6 and 7 allows local users to write to arbitrary files via a symlink attack...
Pivotal Software Cloud Foundry cf-release and CAPI-release path traversal vulnerabilities
Pivotal Software Cloud Foundry CF is a suite of open source Platform-as-a-Service PaaS cloud computing platforms from Pivotal Software in the United States, which provides container scheduling, continuous delivery, and automated service deployment, among other capabilities. cf-release and...
DEBIAN-CVE-2015-7703
The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration...
CVE-2015-7703
Removed by vendor...
Nitro Pro PDF - Multiple Vulnerabilities
Vulnerabilities Summary The following advisory describes three vulnerabilities found in Nitro / Nitro Pro PDF. Nitro Pro is the PDF reader and editor that does everything you will ever need to do with PDF files. The powerful but snappy editor lets you change PDF documents with ease, and comes wit...
CVE-2015-7703: Improper Input Validation
The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration...
PT-2017-11799
Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-11 Description The issue allows remote attackers to write to arbitrary files. This can be achieved via the contents and filename parameters in a route=style action, potentially allowing the overwrite of a .php file...
CVE-2017-11178: Insufficient Verification of Data Authenticity
In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked...
Code execution vulnerability in ThinkerCMS InputController.class.php
ThinkerPHP is based on thinkphp3.2 development of a rapid development system, which has excellent user experience, efficient development efficiency, simple and easy to get started, etc. ThinkerCMS is ThinkerPHP's content management system dedicated to small websites. A code execution vulnerabilit...
Puppet mcollective-sshkey-security plugin public key override vulnerability
puppet is a centralized configuration management system for Linux, Unix, and windows platforms , using its own puppet description language , you can manage configuration files , users , cron tasks , packages , system services and so on. A security vulnerability exists in the puppet...
CVE-2017-2298
The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on the client with the filename appended with the string "pub.pem"...
CVE-2017-2298: Improper Input Validation
The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on the client with the filename appended with the string "pub.pem"...
PT-2017-15334
Name of the Vulnerable Software and Affected Versions mcollective-sshkey-security plugin versions prior to 0.5.1 Description The issue allows a compromised server to write a file to an arbitrary location on the client. This is achieved by using a server-specified identifier as part of a path wher...
DEBIAN-CVE-2015-8697
stalin 0.11-5 allows local users to write to arbitrary files...