CVE-2015-5305: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Kubernetes, as used in Red Hat OpenShift Enterprise 3.0, allows attackers to write to arbitrary files via a crafted object type name, which is not properly handled before passing it to etcd...

Janitza UMG Arbitrary File Read/Write Vulnerability

The Janitza UMG is an online power quality monitor for the energy industry from Janitza Germany. An arbitrary file read/write vulnerability exists in Janitza UMG 508, 509, 511, 604,605. This allows remote attackers to read or write files, or execute arbitrary JASIC code via a session with TCP por...

PT-2015-7027

Name of the Vulnerable Software and Affected Versions Techno Project Japan Enisys Gw versions prior to 1.4.1 Description The issue allows remote authenticated users to write to arbitrary files and consequently execute arbitrary code via unspecified vectors. Recommendations For versions prior to...

CVE-2015-5669: Undefined Security Weakness

Techno Project Japan Enisys Gw before 1.4.1 allows remote authenticated users to write to arbitrary files and consequently execute arbitrary code via unspecified vectors...

CVE-2015-6984

CVE-2015-6984 affects Apple OS X before 10.11.1 via libarchive. A crafted app can trigger a symlink attack to write to arbitrary files due to path/symlink handling in libarchive. Impact: arbitrary file writes. Mitigation: update to OS X 10.11.1 / Security Update 2015-007.

PT-2015-7436

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 9.1 Apple OS X versions prior to 10.11.1 Description A double free issue allows attackers to write to arbitrary files by using a crafted app that accesses AtomicBufferedFile descriptors. Recommendations For Apple iO...

CVE-2015-6983: Undefined Security Weakness

Double free vulnerability in Apple iOS before 9.1 and OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that accesses AtomicBufferedFile descriptors...

CVE-2015-6984: Improper Access Control

libarchive in Apple OS X before 10.11.1 allows attackers to write to arbitrary files via a crafted app that conducts an unspecified symlink attack...

CVE-2015-5662: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive...

CVE-2015-6003: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in QNAP QTS before 4.1.4 build 0910 and 4.2.x before 4.2.0 RC2 build 0910, when AFP is enabled, allows remote attackers to read or write to arbitrary files by leveraging access to an OS X 1 user or 2 guest account...

CVE-2015-6318: Improper Input Validation

Cisco TelePresence Video Communication Server VCS Expressway X8.5.1 and X8.5.2 allows local users to write to arbitrary files via an unspecified symlink attack, aka Bug ID CSCuv11969...

Apache James Server 2.3.2 Insecure User Creation Arbitrary File Write

This module exploits a vulnerability that exists due to a lack of input validation when creating a user. Messages for a given user are stored in a directory partially defined by the username. By creating a user with a directory traversal payload as the username, commands can be written to a given...

MoboTap Dolphin Browser for Android Arbitrary File Write Vulnerability

MoboTap Dolphin Browser for Android is a dolphin browser for the Android platform. MoboTap Dolphin Browser for Android suffers from an arbitrary file write vulnerability that can be exploited by remote attackers to construct a malicious web page that can be parsed and written to arbitrary files...

Mozilla Firefox and Firefox ESR updater.exe Privilege Bypass Vulnerability

Mozilla Firefox is an open source web browser. A security vulnerability exists in the Mozilla Firefox updater.exe file that allows local attackers to perform a symbolic link attack to write arbitrary files at program startup...

CVE-2015-4505: Undefined Security Weakness

updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 on Windows allows local users to write to arbitrary files by conducting a junction attack and waiting for an update operation by the Mozilla Maintenance Service...

libvdpau Arbitrary File Write Vulnerability

libvdpau is a Unix-like system video decoding and presentation API interface VDAPU Video Decode and Presentation API for Unix in the open source library files. An arbitrary file write vulnerability exists in versions of libvdpau prior to 1.1.1, which allows local users to write arbitrary files vi...

CVE-2015-5200

The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors...

CVE-2015-5200: Undefined Security Weakness

The trace functionality in libvdpau before 1.1.1, when used in a setuid or setgid application, allows local users to write to arbitrary files via unspecified vectors...

Cisco Unified Computing System Director Arbitrary File Write Vulnerability

The Cisco Unified Computing System simplifies IT management and improves agility by integrating unified computing, networking, storage access and virtualization into a single system. A security vulnerability in the Cisco Unified Computing System Director JSP file allows remote attackers to exploi...

PT-2015-7142

Name of the Vulnerable Software and Affected Versions Cisco Integrated Management Controller IMC Supervisor versions prior to 1.0.0.1 Cisco UCS Director formerly Cloupia Unified Infrastructure Controller versions prior to 5.2.0.1 Description The issue allows remote attackers to write to arbitrary...