2495 matches found
PYSEC-2018-34
1 core/tests/testmemmap.py, 2 core/tests/testmultiarray.py, 3 f2py/f2py2e.py, and 4 lib/tests/testio.py in NumPy before 1.8.1 allow local users to write to arbitrary files via a symlink attack on a temporary file...
CVE-2017-15550
An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition NVE 9.0.x, 9.1.x, 9.2.x; and EMC Integrated Data Protection Appliance 2.0. A remote authenticated malicious user with low privileges could access arbitrary files on the server file system...
NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01227)
NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...
NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01228)
NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...
Arbitrary File Access
Opencart is vulnerable to arbitrary file access. The library does not properly sanitize the configerrorfilename parameter in the upload/admin/controller/setting/setting.php file, allowing a malicious user to read or delete arbitrary files on the system...
Claymore Dual GPU miner directory traversal vulnerability
Claymore Dual GPU miner is a GPU monitoring software for mining virtual currency computing. A directory traversal vulnerability exists in the remote management interface in Claymore Dual GPU miner version 10.1. A remote attacker could exploit this vulnerability by sending a pathname to minerfile ...
libXfont and libXfont2 Arbitrary File Access Vulnerabilities
libXfont and libXfont2 are both X.Org Foundation X font processing libraries for servers and utilities. A security vulnerability exists in libXfont versions prior to 1.5.4 and libXfont2 versions prior to 2.0.3. A local attacker could exploit this vulnerability to allow the X server to access...
Synology Photo Station Arbitrary File Acquisition Vulnerability
Synology Photo Station is a Synology solution for sharing pictures, videos and blogs over the Internet. A security vulnerability exists in the picasa.php file in Synology Photo Station versions prior to 6.8.1-3458 and prior to 6.3-2970. A remote attacker can exploit the vulnerability to obtain...
Restlet Framework Arbitrary File Access Vulnerability (CNVD-2017-38241)
Restlet Framework is the United States Restlet a lightweight REST framework . The framework can be assembled into a unified Web site and Web services Web applications . Restlet Framework 2.3.12 before the version has a security vulnerability . Remote attackers can exploit the vulnerability to...
Arbitrary File Access Using A Symlink Attack
salt is vulnerable to arbitrary file access. The vulnerability is possible through a symlink attack which is introduced by the usage of os.tmpnam to generate temporary files...
CVE-2017-14949
Restlet Framework before 2.3.12 allows remote attackers to access arbitrary files via a crafted REST API HTTP request that conducts an XXE attack, because only general external entities not parameter external entities are properly considered. This is related to XmlRepresentation, DOMRepresentatio...
QND Advance/Standard vulnerable to directory traversal
Overview QND Advance/Standard provided by QualitySoft Corporation contains a directory traversal vulnerability. QND Advance/Standard provided by QualitySoft Corporation contains a directory traversal vulnerability CWE-22 in an administrative server due to the issue in processing input from an age...
Symantec Management Console Directory Traversal Vulnerability
Symantec Management Console is a set of management console programs from Symantec Corporation USA. The program is used to manage the web-based user interface for Symantec Management Platform and other Symantec solutions. A directory traversal vulnerability exists in Symantec Management Console IT...
WordPress TablePress XML Injection Vulnerability
WordPress is a blogging platform developed by the WordPress Software Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.TablePress is a plugin used in WordPress to create and manage tables. An XML injection vulnerability exists in WordPress...
Ulterius Server Directory Traversal
Exploit Title: Ulterius Server 1.9.5.0 Directory Traversal Arbitrary File Access Date: 11/13/2017 Exploit Author: Rick Osgood Vendor Homepage: https://ulterius.io/ Software Link: https://github.com/Ulterius/server/tree/0e4f2113da287aac88a8b4c5f8364a03685d393d Version: 1.9.5.0 Tested on: Windows...
WordPress plugin "TablePress" vulnerable to improper restriction of XML external entity (XXE) references
Overview The WordPress plugin "TablePress" is a plugin to create and manage tables on WordPress site. TablePress contains a vulnerability where XML external entity XXE references are not properly restricted CWE-611. Yuji Tounai of NTT Communications Corporation reported this vulnerability to IPA...
Ulterius Server < 1.9.5.0 - Directory Traversal Exploit
Exploit for windows platform in category remote exploits Exploit Title: Ulterius Server 1.9.5.0 Directory Traversal Arbitrary File Access Date: 11/13/2017 Exploit Author: Rick Osgood Vendor Homepage: https://ulterius.io/ Software Link:...
Ulterius Server 1.9.5.0 - Directory Traversal
Ulterius Server 1.9.5.0 - Directory Traversal Exploit Title: Ulterius Server 1.9.5.0 Directory Traversal Arbitrary File Access Date: 11/13/2017 Exploit Author: Rick Osgood Vendor Homepage: https://ulterius.io/ Software Link:...
Ulterius Server < 1.9.5.0 - Directory Traversal
Exploit Title: Ulterius Server 1.9.5.0 Directory Traversal Arbitrary File Access Date: 11/13/2017 Exploit Author: Rick Osgood Vendor Homepage: https://ulterius.io/ Software Link: https://github.com/Ulterius/server/tree/0e4f2113da287aac88a8b4c5f8364a03685d393d Version: 1.9.5.0 Tested on: Windows...
