Design/Logic Flaw

w3m through 0.5.3 does not properly handle temporary files when the /.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files...

CVE-2018-6198

w3m through 0.5.3 does not properly handle temporary files when the /.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files...

CVE-2018-6198

w3m through 0.5.3 does not properly handle temporary files when the /.w3m directory is unwritable, which allows a local attacker to craft a symlink attack to overwrite arbitrary files...

CVE-2018-6022

Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files by leveraging back-office access to provide a ..\ in the param.path parameter...

Directory traversal

Directory traversal vulnerability in application/admin/controller/Main.php in NoneCms through 1.3.0 allows remote authenticated users to delete arbitrary files by leveraging back-office access to provide a ..\ in the param.path parameter...

CVE-2017-16606

This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. Th...

CVE-2017-16603

This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. Th...

CVE-2017-16599

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by CVE-2017-16599 through the org.apache.jsp.u.jsp.reports.templates.misc.sample_jsp servlet. The vulnerability stems from improper validation of a user-supplied path when parsing the type parameter, enabling directory traversal on...

CVE-2017-16605

Summary: CVE-2017-16605 affects NetGain Systems Enterprise Manager 7.2.730 build 1034. The vulnerability is in the org.apache.jsp.u.jsp.db.save_005fattrs_jsp servlet (listening on port 8081 by default) and arises from improper validation of a user-supplied path in the id parameter, enabling a dir...

CVE-2017-16604

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by a directory-traversal vulnerability in the servlet org.apache.jsp.u.jsp.cnnic.asset.deviceReport.deviceReport_005fexport_005fdo_jsp. The flaw occurs when parsing the filename parameter, allowing an attacker to overwrite arbitrar...

CVE-2017-16599

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16604

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

CVE-2017-16594

NetGain Systems Enterprise Manager 7.2.730 build 1034 is affected by CVE-2017-16594. The flaw resides in the org.apache.jsp.u.jsp.db.save_005fimage_jsp servlet, which listens on TCP port 8081 by default. Improper validation of the id parameter enables an unauthenticated (though some sources say a...

CVE-2017-16594

This vulnerability allows remote attackers to create arbitrary files on vulnerable installations of NetGain Systems Enterprise Manager 7.2.730 build 1034. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw...

GHSA-6X45-86Q6-RCMR Gyazo allows local users to write arbitrary files

lib/gyazo/client.rb in the gyazo gem 1.0.0 for Ruby allows local users to write to arbitrary files via a symlink attack on a temporary file, related to time-based filenames...

NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01234)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...

CVE-2014-9485

Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive...

Directory traversal

Directory traversal vulnerability in the doextractcurrentfile function in miniunz.c in miniunzip in minizip before 1.1-5 might allow remote attackers to write to arbitrary files via a crafted entry in a ZIP archive...

Debian: Security Advisory (DLA-921-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

NetGain Systems Enterprise Manager Directory Traversal Vulnerability (CNVD-2018-01235)

NetGain Enterprise Manager is an end-to-end IT infrastructure monitoring platform. NetGain Systems Enterprise Manager suffers from a directory traversal vulnerability in its implementation, which can be exploited by an attacker to access or read arbitrary files...