PT-2016-5931

Name of the Vulnerable Software and Affected Versions HPE Network Automation Software version 10.10 Description The issue allows local users to write to arbitrary files. Recommendations For HPE Network Automation Software version 10.10, at the moment, there is no information about a newer version...

Arbitrary File Write Vulnerability in Eurohoo Government System of Shanghai Eurohoo Network Technology Co.

Shanghai Ohuhu Network Technology Co., Ltd. is a service-oriented enterprise integrating Internet software research and development, website operation, e-commerce and IT services. There is an arbitrary file write vulnerability in Shanghai Ohuhu Network Technology Co. The vulnerability allows an...

CVE-2016-5418

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

CVE-2016-5418: Improper Input Validation

The sandboxing code in libarchive 3.2.0 and earlier mishandles hardlink archive entries of non-zero data size, which might allow remote attackers to write to arbitrary files via a crafted archive file...

PT-2017-4046

Name of the Vulnerable Software and Affected Versions JCraft JSch versions prior to 0.1.54 Description The issue allows remote SFTP servers to write to arbitrary files via a .. dot dot backslash in a response to a recursive GET command, potentially impacting the integrity of information. This is...

Cisco Fog Director for IOx Arbitrary File Write Vulnerability

Cisco Fog Director for IOx is an automated management platform for centralized management of multiple applications running at the network edge based on IOx an end-to-end application support system that provides application hosting capabilities from Cisco. The platform controls application setting...

CVE-2016-6405: Improper Input Validation

Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...

PT-2016-6879

Name of the Vulnerable Software and Affected Versions Cisco Fog Director version 1.00 for IOx Description The issue allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface. Recommendations For Cisco Fog Director version 1.0...

Cisco Patches Critical WebEx Meetings Server Vulnerability

Cisco warned customers of 12 vulnerabilities across its product line this week, including a critical vulnerability in the software that powers its conferencing product, WebEx Meetings Server. The company stressed on Wednesday that version 2.6 of its WebEx Meetings Server is vulnerable to a remote...

CVE-2016-6371: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the web interface in Cisco Hosted Collaboration Mediation Fulfillment HCM-F 10.63 and earlier allows remote attackers to write to arbitrary files via a crafted URL, aka Bug ID CSCuz64717...

Arbitrary File Write Vulnerability in Multiple Series of D-Link '/improtexport.php' Products

D-Link DAR-8000-X series and DAR-7000-x series Internet Behavior Audit Gateways provide complete Internet access behavior management solutions to protect the operational efficiency and information security of enterprises. An arbitrary file write vulnerability exists in several D-Link series...

Cisco Hosted Collaboration Mediation Fulfillment Directory Traversal Vulnerability (CNVD-2016-07110)

Cisco Hosted Collaboration Solution HCS is a cloud service that provides communication and collaboration solutions. A security vulnerability exists in the web interface of Cisco Hosted Collaboration Mediation Fulfillment. Due to the program not properly validating the HTTP URL format. An...

Portable SDK for UPnP Devices (libupnp) HTTP Arbitrary File Write

The Portable SDK for UPnP Devices libupnp running on the remote host is affected by a flaw that is triggered when handling HTTP POST or GET requests. An unauthenticated, remote attacker can exploit this to write arbitrary files to the web server file system. C Tenable Network Security, Inc...

Beijing Jiezhong Industrial Control Software FameView Arbitrary File Read/Write Vulnerability

FameView automation configuration management software is a configuration monitoring software developed by Beijing Jiezhong Company based on Windows operating system with years of experience in engineering application and service. Beijing Jiezhong industrial control configuration software FameView...

CVE-2016-5253: Undefined Security Weakness

The Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary files via vectors involving the callback application-path parameter and a hard link...

PT-2016-6767

Name of the Vulnerable Software and Affected Versions SAP TREX version 7.10 Revision 63 Description The issue allows remote attackers to write to arbitrary files. This is related to vectors involving the RFC-Gateway. Recommendations For SAP TREX version 7.10 Revision 63, apply the fix provided in...

CVE-2016-6140: Improper Access Control

SAP TREX 7.10 Revision 63 allows remote attackers to write to arbitrary files via vectors related to RFC-Gateway, aka SAP Security Note 2203591...

CVE-2016-6232: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in KArchive before 5.24, as used in KDE Frameworks, allows remote attackers to write to arbitrary files via a ../ dot dot slash in a filename in an archive file, related to KNewsstuff downloads...

CVE-2016-1610: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the email-template feature in Novell Filr before 1.2 Security Update 3 and 2.0 before Security Update 2 allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. dot dot in a blob name...

PT-2016-4888

Name of the Vulnerable Software and Affected Versions Novell Filr versions prior to 1.2 Security Update 3 Novell Filr versions 2.0 prior to Security Update 2 Description The issue allows remote attackers to bypass intended access restrictions and write to arbitrary files via a .. dot dot in a blo...