16901 matches found
File Deletion Vulnerability in Panavision OA Collaboration Office System
Panmicro oa office system is a business office software. A file deletion vulnerability exists in Panmicro OA Collaboration Office System, which can be exploited by an attacker to delete arbitrary files...
Information disclosure
liboping 1.3.2 allows users reading arbitrary files upon the local system...
CVE-2009-0035
alsa-utils 1.0.19 and later versions allows local users to overwrite arbitrary files via a symlink attack via the /usr/bin/alsa-info and /usr/bin/alsa-info.sh scripts...
EulerOS 2.0 SP5 : tar (EulerOS-SA-2019-2192)
According to the version of the tar package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - Directory traversal vulnerability in the safernamesuffix function in GNU tar 1.14 through 1.29 might allow remote attackers to bypass an intended...
Arbitrary File Read Vulnerability in gxlcms Software System
The gxlcms software system is a simple program tailored to the user. An arbitrary file read vulnerability exists in the gxlcms software system. An attacker can exploit this vulnerability to read arbitrary files...
CVE-2014-9014
Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. dot dot in the file parameter...
Directory traversal
Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. dot dot in the file parameter...
CVE-2014-9014
Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote authenticated users to download arbitrary files via a .. dot dot in the file parameter...
CVE-2019-5418
A content disclosure flaw was found in rubygem-actionview. Specially crafted accept headers, in combination with calls to 'render file:', can cause arbitrary files on the target server to be rendered, disclosing the file contents. Code execution cannot be ruled out if the attacker is able to gain...
GNU cpio -- multiple vulnerabilities
Sergey Poznyakoff reports: This stable release fixes several potential vulnerabilities CVE-2015-1197: cpio, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. CVE-2016-2037: The cpiosafernamesuffix function i...
Debian DLA-1981-1 : cpio security update
A vulnerability was discovered in the cpio package. CVE-2019-14866 It is possible for an attacker to create a file so when backed up with cpio can generate arbitrary files in the resulting tar archive. When the backup is restored the file is then created with arbitrary permissions. For Debian 8...
CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files...
DEBIAN-CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files...
Sql injection
minidlna has SQL Injection that may allow retrieval of arbitrary files...
CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files...
CVE-2013-2738
CVEs overview : The affected software is MiniDLNA (minidlna). The entry CVE-2013-2738 describes a SQL Injection vulnerability that may allow retrieval of arbitrary files. Multiple connected records corroborate that this issue targets MiniDLNA and can lead to file disclosure (CVE-2013-2738, with r...
CVE-2013-2738
minidlna has SQL Injection that may allow retrieval of arbitrary files...
CVE-2010-2548
IcedTea6 before 1.7.4 does not properly check property access, which allows unsigned apps to read and write arbitrary files...