File upload vulnerability in phpok 4.9.032

PHPOK is an enterprise building system that supports expansion. A file upload vulnerability exists in phpok 4.9.032, which can be exploited by attackers to write arbitrary files and gain administrator privileges on a website...

PLCWinNT software suffers from a memory leak vulnerability

CoDeSys is a complete development environment for programmable logic control PLCs, in which simulation functions can be implemented by configuring the PLCWinNT software. A memory leak vulnerability exists in the PLCWinNT software that corresponds to the V2 version of CoDeSys. An attacker can...

NVIDIA SHIELD TV Tegra Kernel Driver NVMAP Elevation of Privilege Vulnerability

NVIDIA SHIELD TV is a gaming console device from NVIDIA Corporation.Tegra kernel driver is one of the Tegra processor kernel drivers.NVMAP is one of the components of... A security vulnerability exists in the NVMAP of the Tegra kernel driver in NVIDIA SHIELD TV SE 6.2 and earlier versions. An...

IKARUS anti.virus ntguard.sys driver arbitrary write vulnerability (CNVD-2017-37946)

IKARUS anti.virus is the Austrian IKARUS Security Software company a set of antivirus software products. ntguard.sys driver is one of the self-protection system driver . IKARUS anti.virus version 2.16.18 before the ntguard.sys driver has an arbitrary write vulnerability, the vulnerability stems...

EulerOS 2.0 SP1 : python-pillow (EulerOS-SA-2017-1049)

According to the version of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - A vulnerability was found in python-pillow. A crafted image file with negative dimensions could cause a buffer to be under-allocated, leading...

Pillow -- multiple vulnerabilities

Pillow reports: Pillow prior to 3.3.2 may experience integer overflow errors in map.c when reading specially crafted image files. This may lead to memory disclosure or corruption. Pillow prior to 3.3.2 and PIL 1.1.7 at least do not check for negative image sizes in ImagingNew in Storage.c. A...

OpenOffice Impress MetaActions Arbitrary Read/Write Vulnerability

OpenOffice.org is a cross-platform office software suite that runs on Windows, Linux, MacOS X X11 and Solaris. Openoffice has an out-of-bounds vulnerability in the handling of MetaActions. An attacker can trigger the vulnerability by causing out-of-bounds reads and writes with an Open Office...

There is an unspecified vulnerability in pax

pax is a set of archiving tools developed by Debian's QA group that can read and write tar and cpio formats. A security vulnerability exists in pax version 1:20140703. A remote attacker can exploit this vulnerability to write arbitrary files by performing a symlink attack on the archive file...

GNU Wget FTP Symlink Arbitrary Filesystem Access

This module exploits a vulnerability in Wget when used in recursive -r mode with a FTP server as a destination. A symlink is used to allow arbitrary writes to the target's filesystem. To specify content for the file, use the "file:/path" syntax for the TARGETDATA option. Tested successfully with...

commons-fileupload: Arbitrary file upload via deserialization

The DiskFileItem class in Apache Commons FileUpload, as used in Red Hat JBoss BRMS 5.3.1; JBoss Portal 4.3 CP07, 5.2.2, and 6.0.0; and Red Hat JBoss Web Server 1.0.2 allows remote attackers to write to arbitrary files via a NULL byte in a file name in a serialized instance...