The vulnerability of the NetCharts Server data visualization platform allows a hacker to write arbitrary files.

The vulnerability in the saveFile.jsp file of the NetCharts Server deployment tool exists due to an incorrect restriction on the path name for the restricted access directory. Exploiting this vulnerability allows a malicious actor to write any files they desire...

CGI RESCUE BloBee Arbitrary Code Execution Vulnerability

CGI RESCUE BloBee is a bulletin release software. A security vulnerability exists in CGI RESCUE BloBee that can be exploited by remote attackers to write to arbitrary files and execute arbitrary code...

PT-2015-3248

Name of the Vulnerable Software and Affected Versions PHP versions prior to 5.4.42 PHP versions 5.5.x prior to 5.5.26 PHP versions 5.6.x prior to 5.6.10 Description The issue is related to the lack of checking for %00 sequences in path names, which can be exploited by a remote attacker to read or...

CVE-2015-4152: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the file output plugin in Elasticsearch Logstash before 1.4.3 allows remote attackers to write to arbitrary files via vectors related to dynamic field references in the path option...

CVE-2015-2962: Improper Input Validation

CGI RESCUE BloBee 1.20 and earlier allows remote attackers to write to arbitrary files, and consequently execute arbitrary code, via unspecified vectors...

PT-2015-6010

Name of the Vulnerable Software and Affected Versions CGI RESCUE BloBee versions 1.20 and earlier Description The issue allows remote attackers to write to arbitrary files and consequently execute arbitrary code via unspecified vectors. Recommendations For versions 1.20 and earlier, at the moment...

Zarafa Collaboration Platform Local Arbitrary File Write Vulnerability

Zarafa Collaboration Platform is a suite of open source email and calendaring software. A security vulnerability in the provider/server/ECServer.cpp file of Zarafa Collaboration Platform allows a local attacker to write arbitrary files by performing a symbolic link attack on the...

CVE-2015-3436: Improper Link Resolution Before File Access

provider/server/ECServer.cpp in Zarafa Collaboration Platform ZCP before 7.1.13 and 7.2.x before 7.2.1 allows local users to write to arbitrary files via a symlink attack on /tmp/zarafa-upgrade-lock...

PT-2015-3191

Name of the Vulnerable Software and Affected Versions Zarafa Collaboration Platform versions prior to 7.1.13 Zarafa Collaboration Platform versions 7.2.x prior to 7.2.1 Description The issue is related to a file access control flaw in the provider/server/ECServer.cpp component. It allows local...

PT-2020-7830 · Abrt +2 · Abrt +2

Name of the Vulnerable Software and Affected Versions: ABRT affected versions not specified Description: The issue allows local users to potentially write to arbitrary files or have other unspecified impact via a symlink attack on certain directories. Recommendations: At the moment, there is no...

CVE-2015-2993: Undefined Security Weakness

SysAid Help Desk before 15.2 does not properly restrict access to certain functionality, which allows remote attackers to 1 create administrator accounts via a crafted request to /createnewaccount or 2 write to arbitrary files via the fileName parameter to /userentry...

Visual Mining NetChart Directory Traversal Vulnerability

Visual Mining NetChart is a suite of data visualization tools from Visual Mining USA. The tool supports the generation of data in the form of charts, graphs, and reports. A directory traversal vulnerability exists in the saveFile.jsp file in the development installer of Visual Mining NetChart. A...

CVE-2015-2950: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Brandon Bowles Open Explorer application before 0.254 Beta for Android allows remote attackers to write to arbitrary files via a crafted filename...

GNU Parallel Arbitrary File Write Vulnerability

GNU Parallel is a set of shell tools developed by the GNU Project that can be used to parallelize the execution of jobs on a single or multiple machines. A security vulnerability exists in versions prior to GNU Parallel 20150522. When a program uses the --cat and --sshlogin commands or the --fifo...

CVE-2015-4156

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4155: Improper Link Resolution Before File Access

GNU Parallel before 20150422, when using 1 --pipe, 2 --tmux, 3 --cat, 4 --fifo, or 5 --compress, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4156: Improper Link Resolution Before File Access

GNU Parallel before 20150522 Nepal, when using 1 --cat or 2 --fifo with --sshlogin, allows local users to write to arbitrary files via a symlink attack on a temporary file...

CVE-2015-4031: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in saveFile.jsp in the development installation in Visual Mining NetChart allows remote attackers to write to arbitrary files via unspecified vectors...

CVE-2015-0171: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors...

UBUNTU-CVE-2015-1324

Apport before 2.17.2-0ubuntu1.1 as packaged in Ubuntu 15.04, before 2.14.70ubuntu8.5 as packaged in Ubuntu 14.10, before 2.14.1-0ubuntu3.11 as packaged in Ubuntu 14.04 LTS, and before 2.0.1-0ubuntu17.9 as packaged in Ubuntu 12.04 LTS allow local users to write to arbitrary files and gain root...