Dell EMC Avamar Server Path Traversal Vulnerability

Dell EMC Avamar Server is a suite of fully virtualized backup and recovery software for servers from Dell USA. A path traversal vulnerability exists in Dell EMC Avamar Server versions 19.1, 19.2, 19.3, which can be exploited by an attacker to gain unauthorized write access to arbitrary files stor...

Packwood MPXJ Path Traversal Vulnerability

Packwood MPXJ is a tool from Packwood that supports multiple programming languages for processing project information.MPXJ supports a variety of data formats: Microsoft Project Exchange MPX, Microsoft Project MPP, MPT, Microsoft Project Data Exchange MSPDI XML, Microsoft Project Database MPD,...

CVE-2020-9922

A logic issue was addressed with improved state management. This issue is fixed in macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra. Processing a maliciously crafted email may lead to writing arbitrary files...

PT-2020-12879

Name of the Vulnerable Software and Affected Versions OvoiceManager version V2.0.1 Description The issue allows OvoiceManager to write vulnerability reports for arbitrary files due to its system permission. Recommendations For OvoiceManager version V2.0.1, consider restricting the system permissi...

USN-4524-1 tnef vulnerabilities

Paul Dreik discovered that TNEF incorrectly handled filenames. If a user were tricked into opening a specially crafted email attachment, an attacker could possibly use this issue to write arbitrary files to the filesystem or cause TNEF crash, resulting in a denial of service. CVE-2019-18849...

CVE-2020-1030

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then install programs...

CVE-2020-7377

The Metasploit Framework module "auxiliary/admin/http/telpho10credentialdump" module is affected by a relative path traversal vulnerability in the untar method which can be exploited to write arbitrary files to arbitrary locations on the host file system when the module is run on a malicious HTTP...

CVE-2020-7376

The Metasploit Framework module "post/osx/gather/enumosx module" is affected by a relative path traversal vulnerability in the getkeychains method which can be exploited to write arbitrary files to arbitrary locations on the host filesystem when the module is run on a malicious host...

PT-2020-3676

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description An elevation of privilege issue exists due to the Windows Print Spooler service improperly allowing arbitrary writing to the file system. This could enable an attacker to run...

CVE-2020-3383

A vulnerability in the archive utility of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct directory traversal attacks on an affected device. The vulnerability is due to a lack of proper input validation of paths that are embedded within archive file...

OPENSUSE-SU-2020:0703-1 Security update for ant

This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053. Non-security issues fixed: - Add rhino to the...

CVE-2020-1048

An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system, aka 'Windows Print Spooler Elevation of Privilege Vulnerability'. This CVE ID is unique from CVE-2020-1070...

SUSE-SU-2020:1352-1 Security update for ant

This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053. Non-security issues fixed: - Add rhino to the...

SUSE-SU-2020:1351-1 Security update for ant

This update for ant fixes the following issues: Security issue fixed: - CVE-2018-10886: Fixed a path traversal vulnerability in malformed zip file paths, which allowed arbitrary file writes and could potentially lead to code execution bsc1100053. Non-security issues fixed: - Add rhino to the...

Opto 22 SoftPAC Project Data Forgery Issue Vulnerability (CNVD-2020-29560)

Opto 22 SoftPAC Project is an automation software suite from Opto 22 USA. The product is capable of providing industrial automation, process control, building automation, remote monitoring, data acquisition and industrial IoT. A data forgery issue vulnerability exists in Opto 22 SoftPAC Project...

DEBIAN-CVE-2020-8159

There is a vulnerability in actionpackpage-caching gem v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view...

UBUNTU-CVE-2020-8159

There is a vulnerability in actionpackpage-caching gem v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view...

Zoho ManageEngine Desktop Central Path Traversal Vulnerability

Zoho ManageEngine Desktop Central DC is a desktop management solution from Zoho. The solution includes software distribution, patch management, system configuration, remote control and other functional modules to support the entire lifecycle of desktop and server management. A path traversal...

CVE-2020-10859

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request...

Directory traversal

Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted AppDependency API request...