Lucene search
+L

7173 matches found

NVD
NVD
added 2024/11/29 10:15 p.m.23 views

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

4.1CVSS0.00177EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2024/11/29 12:00 a.m.9 views

CVE-2024-54159

stalld through 1.19.7 allows local users to cause a denial of service file overwrite via a /tmp/rtthrottle symlink attack...

4.1CVSS6.5AI score0.00177EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2024/11/28 12:27 p.m.15 views

CVE-2024-51127

A flaw was found in the createTempFile method of hornetq. Affected version of hornetq allows attackers to arbitrarily overwrite files or access sensitive information. Mitigation There is currently no known mitigation for this vulnerability...

7.1CVSS6.6AI score0.00671EPSS
SaveExploits1References5
NVD
NVD
added 2024/11/28 4:15 a.m.38 views

CVE-2024-46939

The game extension engine of versions 1.2.7.0 and earlier exposes some components, and attackers can construct parameters to perform path traversal attacks, which can overwrite local specific files...

2.4CVSS0.00202EPSS
SaveExploits0References1
CVE
CVE
added 2024/11/28 3:26 a.m.56 views

CVE-2024-46939

The CVE-2024-46939 issue affects the vivo Game Extension Engine, versions 1.2.7.0 and earlier. The engine exposes certain components, enabling attackers to craft parameters for path traversal attacks that can overwrite local files. No explicit patch/version fix is documented in the provided sourc...

2.4CVSS6.6AI score0.00202EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/22 12:00 a.m.12 views

PT-2024-33250 · Unknown · Qulog Center

Name of the Vulnerable Software and Affected Versions: QuLog Center versions prior to 1.7.0.831 QuLog Center versions prior to 1.8.0.888 Description: A link following vulnerability has been reported to affect QuLog Center, allowing remote attackers to traverse the file system to unintended...

8.7CVSS6.9AI score0.00927EPSS
SaveExploits0References6
OSV
OSV
added 2024/11/18 4:15 p.m.8 views

CVE-2020-26074

A vulnerability in system file transfer functions of Cisco SD-WAN vManage Software could allow an authenticated, local attacker to gain escalated privileges on the underlying operating system. The vulnerability is due to improper validation of path input to the system file transfer functions. An...

7.8CVSS5.9AI score0.00185EPSS
SaveExploits0References2
NVD
NVD
added 2024/11/18 10:15 a.m.28 views

CVE-2024-41971

A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss...

8.1CVSS0.00605EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/18 9:04 a.m.25 views

CVE-2024-41972 WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges...

6.5CVSS0.00585EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/18 9:04 a.m.17 views

CVE-2024-41972 WAGO: Arbitrary File Overwrite Leading to Privileged File Read in Multiple Devices

A low privileged remote attacker can overwrite an arbitrary file on the filesystem which may lead to an arbitrary file read with root privileges...

6.5CVSS7AI score0.00585EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/18 9:04 a.m.11 views

CVE-2024-41971 WAGO: Arbitrary File Overwrite in Multiple Devices

A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss...

8.1CVSS7AI score0.00605EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/11/18 12:00 a.m.14 views

PT-2024-29671 · Wago · Cc100 0751-9X01 +10

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: A low privileged remote attacker can overwrite an arbitrary file on the filesystem, leading to a Denial of Service DoS and data loss. Recommendations: A...

8.1CVSS7.1AI score0.00605EPSS
SaveExploits0References6
Huntr
Huntr
added 2024/11/17 1:57 p.m.9 views

Arbitrary File Overwrite & RCE via Tarfile Path Traversal

Description The DJL package utilizes an untar function, for example, when downloading and saving models. Additionally, the untar function overwrites existing files. Therefore, the untar method includes the following two security measures to prevent misuse of its functionality. 1. Security measure...

7.2AI score
SaveExploits0
OSV
OSV
added 2024/11/15 4:15 p.m.7 views

CVE-2023-20092

Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An...

4.4CVSS6AI score0.00194EPSS
SaveExploits0References1
OSV
OSV
added 2024/11/15 4:15 p.m.10 views

CVE-2023-20004

Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An...

4.4CVSS6AI score0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/15 3:15 p.m.27 views

CVE-2023-20091 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. This vulnerability is due to improper access controls on files that are on the local file system. An attacker...

5.1CVSS7.1AI score0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/15 3:15 p.m.26 views

CVE-2023-20091 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

A vulnerability in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. This vulnerability is due to improper access controls on files that are on the local file system. An attacker...

5.1CVSS0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/15 3:12 p.m.22 views

CVE-2023-20092 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An...

4.4CVSS0.00194EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/11/15 3:12 p.m.11 views

CVE-2023-20092 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An...

4.4CVSS7.3AI score0.00194EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/11/15 3:11 p.m.21 views

CVE-2023-20093 Cisco TelePresence Collaboration Endpoint and RoomOS Software Arbitrary File Overwrite Vulnerability

Three vulnerabilities in the CLI of Cisco TelePresence CE and RoomOS could allow an authenticated, local attacker to overwrite arbitrary files on the local file system of an affected device. These vulnerabilities are due to improper access controls on files that are on the local file system. An...

4.4CVSS0.00194EPSS
SaveExploits0References1
Rows per page
Query Builder