PT-2020-12401

Name of the Vulnerable Software and Affected Versions Foxit PhantomPDF version 9.7.0.29478 Description This issue allows remote attackers to execute arbitrary code on affected installations. User interaction is required to exploit this issue, where the target must visit a malicious page or open a...

Foxit PhantomPDF ConvertToPDF Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the communication...

Foxit PhantomPDF CombineFiles Arbitrary File Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PhantomPDF. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the communication...

Arbitrary File Write

encryptfs-utils is vulnerable to arbitrary file write. A race condition flaw in mount.ecryptfsprivate could allow a local attacker to overwrite arbitrary files...

Arbitrary File Write

encryptfs-utils is vulnerable to atbirary file write. A race condition flaw in the way temporary files were accessed in mount.ecryptfsprivate could allow a malicious, local user to make arbitrary modifications to the mtab file...

Arbitrary File Write

perl-archive-tar is vulnerable to arbitrary file write. The vulnerability exists as multiple directory traversal flaws were discovered in the Archive::Tar module. A specially-crafted tar file could cause a Perl script, using the Archive::Tar module to extract the archive, to overwrite an arbitrar...

Arbitrary File Write

java ibm is vulnerable to arbitary file write. An unspecified vulnerability allows remote attackers to create and modify arbitrary files via unknown vectors involving JNLPAppletLauncher...

PT-2020-15141

Name of the Vulnerable Software and Affected Versions Oculus Desktop versions prior to 1.44.0.32849 Description The issue allows local users to write to arbitrary files and gain privileges through vectors involving a hard link to a log file, by exploiting the ability of the OVRRedir.exe process t...

Arbitrary File Write Vulnerability in Gila CMS

Gila CMS is an open source content management system. Gila CMS suffers from an arbitrary file write vulnerability that can be exploited by an attacker to write malicious code to the server and gain administrative privileges on the server...

CVE-2020-10696

A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTPs server and then write files to the user's system anywhere that the user has permissions...

CVE-2020-6008

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

CVE-2020-6008

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

Remote code execution

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

CVE-2020-6008

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

CVE-2020-6008

The LifterLMS WordPress plugin, in versions prior to 3.37.15 , is vulnerable to an arbitrary file write flaw. The root cause is identified as insufficient validation of files during the file upload process , which allows remote attackers to write and execute arbitrary PHP code on the server. Prac...

CVE-2020-10696: Improper Limitation of a Pathname to a Restricted Directory

A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image hosted on an HTTPs server and then write files to the user's system anywhere that the user has permissions...

PT-2020-18884

Name of the Vulnerable Software and Affected Versions LifterLMS Wordpress plugin versions prior to 3.37.15 Description The issue allows for arbitrary file write, which can lead to remote code execution. It is related to multiple critical vulnerabilities, including SQL injection and file write...

CVE-2020-6008: Unrestricted Upload of File with Dangerous Type

LifterLMS Wordpress plugin version below 3.37.15 is vulnerable to arbitrary file write leading to remote code execution...

CVE-2019-19606: Improper Neutralization of Special Elements used in an OS Command

X-Plane before 11.41 has multiple improper path validations that could allow reading and writing files from/to arbitrary paths or a leak of OS credentials to a remote system via crafted network packets. This could be used to execute arbitrary commands on the system...

CVE-2020-5555

Shihonkanri Plus GOOUT Ver1.5.8 and Ver2.2.10 allows remote attackers to read and write data of the files placed in the same directory where it is placed via unspecified vector due to the improper input validation issue...