Lucene search
+L

1679 matches found

Veracode
Veracode
added 2019/12/18 2:53 a.m.21 views

Arbitrary File Overwrite

cakephp/cakephp is vulnerable to arbitrary file overwrite. The SmtpTransport module could be used to overwrite arbitrary files on the web server during deserialization of malicious values...

7.1CVSS3.5AI score0.00599EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2019/12/13 1:15 a.m.19 views

CVE-2019-16777

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

7.7CVSS7.5AI score0.01984EPSS
SaveExploits0References11
OSV
OSV
added 2019/12/13 1:15 a.m.29 views

CVE-2019-16777

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

6.5CVSS6.2AI score
SaveExploits0References11
OSV
OSV
added 2019/12/13 1:15 a.m.2 views

DEBIAN-CVE-2019-16777

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

6.5CVSS6.9AI score0.01984EPSS
SaveExploits0References1
Prion
Prion
added 2019/12/13 1:15 a.m.26 views

Code injection

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

5.5CVSS7.5AI score0.01984EPSS
SaveExploits0References11Affected Software6
UbuntuCve
UbuntuCve
added 2019/12/13 1:15 a.m.41 views

CVE-2019-16777

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

7.7CVSS6.9AI score0.01984EPSS
SaveExploits0References3
Debian CVE
Debian CVE
added 2019/12/13 1:0 a.m.31 views

CVE-2019-16777

Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritten by other package installations. For example, if a package was installed globally and created a serve binary, any subsequent installs of...

7.7CVSS6.9AI score0.01984EPSS
SaveExploits0
CVE
CVE
added 2019/12/13 1:0 a.m.428 views

CVE-2019-16777

The CVE-2019-16777 entry affects the npm CLI for versions prior to 6.13.4, which are vulnerable to Arbitrary File Overwrite. The issue allows overwriting globally-installed binaries (e.g., a serve binary) during subsequent package installations, including when --ignore-scripts is used. This behav...

7.7CVSS6.8AI score0.01984EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
added 2019/12/12 3:16 a.m.25 views

Arbitrary File Overwrite

npm is vulnerable to arbitrary file overwrite. The package does not prevent existing globally-installed binaries from being overwritten by other package installations in /usr/local/bin. This would allow the overwriting of binary files created from the first installation...

8.1CVSS5.1AI score0.03342EPSS
SaveExploits0References14Affected Software2
Veracode
Veracode
added 2019/12/12 3:0 a.m.15 views

Arbitrary File Overwrite

bin-links is vulnerable to arbitrary file overwrite. The application does not prevent globally-installed binaries to be overwritten by other package installs...

3.2AI score
SaveExploits0
Symantec
Symantec
added 2019/12/11 12:0 a.m.28 views

Drupal Webform Module Multiple Security Vulnerabilities

Description Webform Module of Drupal is prone to the following multiple security vulnerabilities: 1. An arbitrary-file-overwrite vulnerability 2. A cross-site scripting vulnerability An attacker may leverage these issues to execute arbitrary script code in the browser of an unsuspecting user in...

SaveExploits0References1Affected Software1
exploitpack
exploitpack
added 2019/12/11 12:0 a.m.119 views

AppXSvc 17763 - Arbitrary File Overwrite (DoS)

AppXSvc 17763 - Arbitrary File Overwrite DoS Exploit Title: AppXSvc 17763 - Arbitrary File Overwrite DoS Date: 2019-10-28 Exploit Author: Gabor Seljan Vendor Homepage: https://www.microsoft.com/ Version: 17763.1.amd64fre.rs5release.180914-1434 Tested on: Windows 10 Version 1809 for x64-based...

7.2CVSS0.7AI score0.414EPSS
SaveExploits21
Packet Storm
Packet Storm
added 2019/12/11 12:0 a.m.255 views

AppXSvc 17763 Arbitrary File Overwrite

Exploit Title: AppXSvc 17763 - Arbitrary File Overwrite DoS Date: 2019-10-28 Exploit Author: Gabor Seljan Vendor Homepage: https://www.microsoft.com/ Version: 17763.1.amd64fre.rs5release.180914-1434 Tested on: Windows 10 Version 1809 for x64-based Systems CVE: CVE-2019-1476 Summary: AppXSvc...

7.2CVSS0.9AI score0.414EPSS
SaveExploits21
Positive Technologies
Positive Technologies
added 2019/12/11 12:0 a.m.5 views

PT-2019-1104 · Npm +6 · Npm Cli +6

Name of the Vulnerable Software and Affected Versions: npm CLI versions prior to 6.13.4 Description: The issue allows for an Arbitrary File Overwrite due to the failure to prevent existing globally-installed binaries from being overwritten by other package installations. For example, if a package...

9.8CVSS7.2AI score0.57132EPSS
SaveExploits2References106
Exploit DB
Exploit DB
added 2019/12/11 12:0 a.m.386 views

AppXSvc 17763 - Arbitrary File Overwrite (DoS)

Exploit Title: AppXSvc 17763 - Arbitrary File Overwrite DoS Date: 2019-10-28 Exploit Author: Gabor Seljan Vendor Homepage: https://www.microsoft.com/ Version: 17763.1.amd64fre.rs5release.180914-1434 Tested on: Windows 10 Version 1809 for x64-based Systems CVE: CVE-2019-1476 Summary: AppXSvc...

7.8CVSS7AI score0.414EPSS
SaveExploits21
exploitpack
exploitpack
added 2019/12/06 12:0 a.m.146 views

Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite

Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Author : Peter Lapp Exploit Date: 2019-12-05 Vendor Homepage : https://www.trendmicro.com/enus/business.html Link Software :...

6.6CVSS7AI score0.01311EPSS
SaveExploits4
Exploit DB
Exploit DB
added 2019/12/06 12:0 a.m.240 views

Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite

Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Author : Peter Lapp Exploit Date: 2019-12-05 Vendor Homepage : https://www.trendmicro.com/enus/business.html Link Software : https://help.deepsecurity.trendmicro.com/software.html?regs=NABU&prodid=1716 Tested on...

7.1CVSS7AI score0.01311EPSS
SaveExploits4
Packet Storm
Packet Storm
added 2019/12/06 12:0 a.m.262 views

Trend Micro Deep Security Agent 11 Arbitrary File Overwrite

Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Author : Peter Lapp Exploit Date: 2019-12-05 Vendor Homepage : https://www.trendmicro.com/enus/business.html Link Software : https://help.deepsecurity.trendmicro.com/software.html?regs=NABU&prodid=1716 Tested on...

6.6CVSS7AI score0.01311EPSS
SaveExploits4
0day.today
0day.today
added 2019/12/06 12:0 a.m.371 views

Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit

Exploit Title: Trend Micro Deep Security Agent 11 - Arbitrary File Overwrite Exploit Author : Peter Lapp Vendor Homepage : https://www.trendmicro.com/enus/business.html Link Software : https://help.deepsecurity.trendmicro.com/software.html?regs=NABU&prodid=1716 Tested on OS: v11.0.582 and...

7.1CVSS0.01311EPSS
SaveExploits4
Symantec
Symantec
added 2019/12/05 12:0 a.m.32 views

Dell Command Configure CVE-2019-18575 Arbitrary File Overwrite Vulnerability

Description Dell Command Configure is prone to an arbitrary file-overwrite vulnerability. Successful exploits may allow an attacker to write arbitrary files in the context of the user running the affected application. Dell Command Configure prior to 4.2.1 are vulnerable. Technologies Affected Del...

1.9AI score0.0034EPSS
SaveExploits0References1
Rows per page
Query Builder