PT-2015-6436

Name of the Vulnerable Software and Affected Versions GNU Parallel versions prior to 20150522 Description The issue allows local users to write to arbitrary files via a symlink attack on a temporary file when using 1 --cat or 2 --fifo with --sshlogin. Recommendations For GNU Parallel versions pri...

PT-2015-6435

Name of the Vulnerable Software and Affected Versions GNU Parallel versions prior to 20150422 Description The issue allows local users to write to arbitrary files via a symlink attack on a temporary file when using certain options, including --pipe, --tmux, --cat, --fifo, or --compress...

PT-2015-4959

Name of the Vulnerable Software and Affected Versions Lhaplus versions prior to 1.70 Description A directory traversal issue allows remote attackers to write to arbitrary files by using a crafted archive. Recommendations For versions prior to 1.70, update to version 1.70 or later to resolve the...

CVE-2015-0906: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in Lhaplus before 1.70 allows remote attackers to write to arbitrary files via a crafted archive...

CVE-2015-0557

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

CVE-2015-0557: Improper Limitation of a Pathname to a Restricted Directory

Open-source ARJ archiver 3.10.22 does not properly remove leading slashes from paths, which allows remote attackers to conduct absolute path traversal attacks and write to arbitrary files via multiple leading slashes in a path in an ARJ archive...

PT-2015-4980

Name of the Vulnerable Software and Affected Versions ANTlabs InnGate firmware versions on IG 3100, IG 3101, InnGate 3.00 E, InnGate 3.01 E, InnGate 3.02 E, InnGate 3.10 E, InnGate 3.01 G, and InnGate 3.10 G Description The issue allows remote attackers to read or write to arbitrary files via TCP...

Cisco AnyConnect Secure Mobility Client Arbitrary File Write Vulnerability

The Cisco AnyConnect Secure Mobility Client is Cisco's next-generation VPN client. The Cisco AnyConnect Secure Mobility Client has a security vulnerability in inter-process communication IPC that allows a local attacker to write and overwrite arbitrary files with elevated privileges...

PT-2015-4790

Name of the Vulnerable Software and Affected Versions Cisco AnyConnect Secure Mobility Client version 4.0.00051 and earlier Description The issue is related to improper implementation of access control for IPC messages, allowing local users to write to arbitrary files via crafted messages...

CVE-2015-0665: Improper Limitation of a Pathname to a Restricted Directory

The Hostscan module in Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier allows local users to write to arbitrary files via crafted IPC messages, aka Bug ID CSCus79173...

CVE-2015-0663: Undefined Security Weakness

Cisco AnyConnect Secure Mobility Client 4.0.00051 and earlier does not properly implement access control for IPC messages, which allows local users to write to arbitrary files via crafted messages, aka Bug ID CSCus79392...

CVE-2015-2304: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in bsdcpio in libarchive 3.1.2 and earlier allows remote attackers to write to arbitrary files via a full pathname in an archive...

Cisco AnyConnect Secure Mobility Client Arbitrary File Write Vulnerability

A vulnerability in the inter-process communication IPC channel of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker to write arbitrary files with elevated privileges. The vulnerability is due to lack of authentication or authorization of certain IPC commands. An...

PT-2015-5703

Name of the Vulnerable Software and Affected Versions libarchive versions 3.1.2 and earlier Description The issue allows remote attackers to write to arbitrary files via a full pathname in an archive. This is due to an absolute path traversal vulnerability in bsdcpio. Recommendations For libarchi...

KENT-WEB Joyful Note Arbitrary Code Execution Vulnerability

KENT-WEB Joyful Note is a suite of message board applications from the Japanese company KENT-WEB. A security vulnerability exists in KENT-WEB Joyful Note versions prior to 5.3. A remote attacker can exploit the vulnerability to delete or write arbitrary files and execute arbitrary code...

PT-2015-4176

Name of the Vulnerable Software and Affected Versions Speed Root Explorer versions prior to 3.2 Speed Explorer versions prior to 2.2 Description The issue allows remote attackers to write to arbitrary files via a crafted filename, potentially leading to unauthorized data modification...

CVE-2014-9282: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Speed Root Explorer application before 3.2 for Android and the Speed Explorer application before 2.2 for Android allows remote attackers to write to arbitrary files via a crafted filename...

DEBIAN-CVE-2015-1589

Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. dot dot in a CHM file...

CVE-2015-1589: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in arCHMage 0.2.4 allows remote attackers to write to arbitrary files via a .. dot dot in a CHM file...

Rsync Arbitrary File Write Vulnerability

rsync is a data mirroring backup application for Unix-like systems developed by Australian software developers Andrew Tridgell and Paul Mackerras that synchronizes file and directory updates between two computers and uses differential encoding to reduce data transfers. An arbitrary file write...