DEBIAN-CVE-2015-7703

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration...

CVE-2015-7703

Removed by vendor...

CVE-2015-7703: Improper Input Validation

The "pidfile" or "driftfile" directives in NTP ntpd 4.2.x before 4.2.8p4, and 4.3.x before 4.3.77, when ntpd is configured to allow remote configuration, allows remote attackers with an IP address that is allowed to send configuration requests, and with knowledge of the remote configuration...

Nitro Pro PDF - Multiple Vulnerabilities

Vulnerabilities Summary The following advisory describes three vulnerabilities found in Nitro / Nitro Pro PDF. Nitro Pro is the PDF reader and editor that does everything you will ever need to do with PDF files. The powerful but snappy editor lets you change PDF documents with ease, and comes wit...

PT-2017-11799

Name of the Vulnerable Software and Affected Versions FineCMS through 2017-07-11 Description The issue allows remote attackers to write to arbitrary files. This can be achieved via the contents and filename parameters in a route=style action, potentially allowing the overwrite of a .php file...

CVE-2017-11178: Insufficient Verification of Data Authenticity

In FineCMS through 2017-07-11, application/core/controller/style.php allows remote attackers to write to arbitrary files via the contents and filename parameters in a route=style action. For example, this can be used to overwrite a .php file because the file extension is not checked...

Code execution vulnerability in ThinkerCMS InputController.class.php

ThinkerPHP is based on thinkphp3.2 development of a rapid development system, which has excellent user experience, efficient development efficiency, simple and easy to get started, etc. ThinkerCMS is ThinkerPHP's content management system dedicated to small websites. A code execution vulnerabilit...

Puppet mcollective-sshkey-security plugin public key override vulnerability

puppet is a centralized configuration management system for Linux, Unix, and windows platforms , using its own puppet description language , you can manage configuration files , users , cron tasks , packages , system services and so on. A security vulnerability exists in the puppet...

CVE-2017-2298

The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on the client with the filename appended with the string "pub.pem"...

CVE-2017-2298: Improper Input Validation

The mcollective-sshkey-security plugin before 0.5.1 for Puppet uses a server-specified identifier as part of a path where a file is written. A compromised server could use this to write a file to an arbitrary location on the client with the filename appended with the string "pub.pem"...

PT-2017-15334

Name of the Vulnerable Software and Affected Versions mcollective-sshkey-security plugin versions prior to 0.5.1 Description The issue allows a compromised server to write a file to an arbitrary location on the client. This is achieved by using a server-specified identifier as part of a path wher...

DEBIAN-CVE-2015-8697

stalin 0.11-5 allows local users to write to arbitrary files...

UBUNTU-CVE-2015-8697

stalin 0.11-5 allows local users to write to arbitrary files...

CVE-2015-8697

stalin 0.11-5 allows local users to write to arbitrary files...

PT-2017-7467

Name of the Vulnerable Software and Affected Versions stalin versions 0.11-5 Description The issue allows local users to write to arbitrary files. Recommendations For stalin versions 0.11-5, at the moment, there is no information about a newer version that contains a fix for this vulnerability...

CVE-2014-8149: Improper Input Validation

OpenDaylight defense4all 1.1.0 and earlier allows remote authenticated users to write report data to arbitrary files...

CVE-2015-8697: Improper Access Control

stalin 0.11-5 allows local users to write to arbitrary files...

PT-2017-6152

Name of the Vulnerable Software and Affected Versions: OpenDaylight defense4all versions 1.1.0 and earlier Description: The issue allows remote authenticated users to write report data to arbitrary files. Recommendations: For versions 1.1.0 and earlier, update to a version later than 1.1.0 to...

HPE Intelligent Management Center dbman FileTrans Arbitrary File Write (CVE-2017-5822)

An arbitrary file write vulnerability has been reported in the dbman component of HPE Intelligent Management Center. The vulnerability is due to lack of authentication on FileTrans commands, used to transfer files to the host running dbman. A remote, unauthenticated attacker can exploit the...

PT-2017-15649

Name of the Vulnerable Software and Affected Versions Adobe Captivate versions 9 and earlier Description The issue is related to a remote code execution vulnerability in the quiz reporting feature. This vulnerability could be exploited to read and write arbitrary files to the server...