Cisco StarOS Remote Security Bypass Vulnerability

Cisco StarOS is the United States Cisco Cisco company's set of operating systems running in the 5000 and other series of router equipment. A remote security bypass vulnerability exists in Cisco StarOS, which can be exploited by a remote authenticated attacker to modify arbitrary files. The...

CVE-2016-3108

The pulp-gen-nodes-certificate script in Pulp before 2.8.3 allows local users to leak the keys or write to arbitrary files via a symlink attack...

CVE-2017-8108

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file...

UBUNTU-CVE-2017-8108

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file...

CVE-2017-8108

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file...

CVE-2017-8108

CVE-2017-8108 affects Lynis before 2.5.0. Unspecified tests in Lynis can be exploited via a symlink attack on a temporary file to overwrite arbitrary files or gain local privileges. References in multiple disclosures (Fedora/OpenSUSE/Amazon Linux/Open Source advisories) indicate the issue permits...

CVE-2017-8108

Unspecified tests in Lynis before 2.5.0 allow local users to write to arbitrary files or possibly gain privileges via a symlink attack on a temporary file...

Code injection

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

CVE-2016-9710

IBM Predictive Solutions Foundation formerly PMQ could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted URL to specify a file from the local system, which could allow the attacker to obtain sensitive information. IBM X-Force ID: 119618...

Directory traversal

Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...

Code injection

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...

CVE-2015-8326

The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...

CVE-2015-7888

Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...

GLSA-201706-05 : D-Bus: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201706-05 D-Bus: Multiple vulnerabilities Multiple vulnerabilities have been discovered in D-Bus. Please review the original report referenced below for details. Impact : An attacker could possibly overwrite arbitrary files named...

CVE-2017-9428

A directory traversal vulnerability exists in core\admin\ajax\developer\extensions\file-browser.php in BigTree CMS through 4.2.18 on Windows, allowing attackers to read arbitrary files via ..\ sequences in the directory parameter...

Directory traversal

A directory traversal vulnerability exists in core\admin\ajax\developer\extensions\file-browser.php in BigTree CMS through 4.2.18 on Windows, allowing attackers to read arbitrary files via ..\ sequences in the directory parameter...

Directory traversal

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...

CVE-2014-9983

Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...