Lucene search
+L

1679 matches found

Veracode
Veracode
added 2020/04/10 12:41 a.m.29 views

Arbitrary File Overwrite

fence is vulnerable to arbitrary file overwrite. The pservershutdown function in fenceegenera allows local users to overwrite arbitrary files via a symlink attack on the /tmp/eglog temporary file...

6.9CVSS5.4AI score0.00711EPSS
SaveExploits1References19Affected Software2
Veracode
Veracode
added 2020/04/10 12:36 a.m.24 views

Arbitrary File Overwrite

cman is vulnerable to arbitrary file overwrites. The vulnerability exists as multiple insecure temporary file use flaws were found in fenceapcsnmp and ccstool. A local attacker could use these flaws to overwrite an arbitrary file writable by a victim running those utilities typically root with th...

6.9CVSS2.8AI score0.0039EPSS
SaveExploits0References25Affected Software3
Veracode
Veracode
added 2020/04/10 12:31 a.m.18 views

Arbitrary File Overwrite

openswan is vulnerable to arbitrary file overwrite. The vulnerability exists as Openswan's livetest script created temporary files in an insecure manner. A local attacker could use this flaw to overwrite arbitrary files owned by the user running the script...

4.4CVSS2.5AI score0.01115EPSS
SaveExploits6References17Affected Software1
Veracode
Veracode
added 2020/04/10 12:28 a.m.28 views

Arbitrary File Overwrite

xen is vulnerable to arbitrary file overwrite. The vulnerability exists as it was discovered that the qemu-dm.debug script created a temporary file in /tmp in an insecure way. A local attacker in Dom0 could, potentially, use this flaw to overwrite arbitrary files via a symlink attack...

6.9CVSS3.3AI score0.00319EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
added 2020/04/10 12:18 a.m.26 views

Arbitrary File Overwrite

tar is vulnerable to arbitrary file overwrite. The vulnerability exists as a path traversal flaw was discovered in the way GNU tar extracted archives. A malicious user could create a tar archive that could write to arbitrary files to which the user running GNU tar had write access...

6.8CVSS2.9AI score0.02743EPSS
SaveExploits1References40Affected Software1
Veracode
Veracode
added 2020/04/10 12:14 a.m.29 views

Arbitrary File Overwrite

coolkey is vulnerable to arbitrary file overwrite. A local attacker could perform a symlink attack and cause arbitrary files to be overwritten...

3.3CVSS3.4AI score0.00301EPSS
SaveExploits1References9Affected Software1
RedhatCVE
RedhatCVE
added 2020/04/06 10:58 a.m.18 views

CVE-2019-13173

fstream before 1.0.12 is vulnerable to Arbitrary File Overwrite. Extracting tarballs containing a hardlink to a file that already exists in the system, and a file that matches the hardlink, will overwrite the system's file with the contents of the extracted file. The fstream.DirWriter function is...

7.5CVSS1.6AI score0.02416EPSS
SaveExploits0References4
RedhatCVE
RedhatCVE
added 2020/04/03 2:9 a.m.50 views

CVE-2019-16777

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

7.7CVSS1.7AI score0.01984EPSS
SaveExploits0References3
RedHat Linux
RedHat Linux
added 2020/02/24 12:55 p.m.5 views

npm: Global node_modules Binary Overwrite

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

7.7CVSS7.1AI score0.01984EPSS
SaveExploits0References4
CNVD
CNVD
added 2020/02/24 12:0 a.m.4 views

Apple macOS Catalina PackageKit Input Validation Vulnerability Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in the PackageKit component of Apple macOS Catalina versions prior to 10.15.3. The vulnerability can be exploited by an attacker to overwrite arbitrary files with the...

3.6CVSS6.6AI score0.00326EPSS
SaveExploits0References1
OSV
OSV
added 2020/02/21 3:15 p.m.7 views

CVE-2020-5324

Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged...

4.4CVSS5.9AI score0.00252EPSS
SaveExploits0References1
Prion
Prion
added 2020/02/21 3:15 p.m.25 views

Arbitrary file deletion

Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged...

2.6CVSS4.7AI score0.00252EPSS
SaveExploits0References1Affected Software113
CVE
CVE
added 2020/02/21 2:50 p.m.89 views

CVE-2020-5324

CVE-2020-5324 describes an Arbitrary File Overwrite vulnerability in the Dell Firmware Update Utility. During the execution window by an administrator, a locally authenticated, low-privileged user could exploit a symlink attack to overwrite arbitrary files, though the vulnerability does not affec...

7.1CVSS4.7AI score0.00252EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2020/02/21 2:50 p.m.27 views

CVE-2020-5324

Dell Client Consumer and Commercial Platforms contain an Arbitrary File Overwrite Vulnerability. The vulnerability is limited to the Dell Firmware Update Utility during the time window while being executed by an administrator. During this time window, a locally authenticated low-privileged...

7.1CVSS6.8AI score0.00252EPSS
SaveExploits0References1
OSV
OSV
added 2020/01/28 5:15 p.m.2 views

DEBIAN-CVE-2015-7851

Directory traversal vulnerability in the saveconfig function in ntpd in ntpcontrol.c in NTP before 4.2.8p4, when used on systems that do not use '' or '/' characters for directory separation such as OpenVMS, allows remote authenticated users to overwrite arbitrary files...

6.5CVSS7.2AI score0.03942EPSS
SaveExploits1References1
Apple
Apple
added 2020/01/28 12:0 a.m.112 views

About the security content of watchOS 6.1.2

About the security content of watchOS 6.1.2 This document describes the security content of watchOS 6.1.2. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

9.3CVSS8.9AI score0.16111EPSS
SaveExploits2References1Affected Software1
Prion
Prion
added 2020/01/13 1:15 p.m.21 views

Arbitrary file deletion

WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability...

6.5CVSS7AI score0.03288EPSS
SaveExploits3References3Affected Software1
Cvelist
Cvelist
added 2020/01/13 12:22 p.m.28 views

CVE-2014-6059

WordPress Advanced Access Manager Plugin before 2.8.2 has an Arbitrary File Overwrite Vulnerability...

6.9AI score0.03288EPSS
SaveExploits3References3
CVE
CVE
added 2020/01/13 12:22 p.m.114 views

CVE-2014-6059

CVE-2014-6059 concerns the WordPress plugin Advanced Access Manager (AAM) prior to version 2.8.2. The vulnerability is an Arbitrary File Overwrite flaw that allows an admin user to write arbitrary content to arbitrary files, which could in some configurations lead to arbitrary code execution or o...

7.2CVSS6.9AI score0.03288EPSS
SaveExploits3References3Affected Software1
Positive Technologies
Positive Technologies
added 2020/01/13 12:0 a.m.10 views

PT-2020-7722 · WordPress · Wordpress Advanced Access Manager Plugin

Name of the Vulnerable Software and Affected Versions: WordPress Advanced Access Manager Plugin versions prior to 2.8.2 Description: The issue is related to an Arbitrary File Overwrite Vulnerability. There is no information provided about the estimated number of potentially affected devices...

7.2CVSS6.8AI score0.03288EPSS
SaveExploits3References6
Rows per page
Query Builder