8288 matches found
CVE-2015-8326
The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...
CVE-2015-8326
The IPTables-Parse module before 1.6 for Perl allows local users to write to arbitrary files owned by the current user...
IBM WebSphere MQ Local Security Bypass Vulnerability
IBM WebSphere MQ is a messaging middleware product from IBM, USA. The product focuses on providing a reliable and proven messaging backbone for Service Oriented Architecture SOA. A local security bypass vulnerability exists in IBM WebSphere MQ versions 9.0.0.0 and 9.0.1 that stems from incorrect...
Parallels Desktop - Virtual Machine Escape
Parallels Desktop - Virtual Machine Escape + Title: Parallels Desktop - Virtual Machine Escape + Product: Parallels + Vendor: http://www.parallels.com/products/desktop/ + Affected Versions: All Version Author : Mohammad Reza Espargham Linkedin : https://ir.linkedin.com/in/rezasp...
openSUSE Security Update : libupnp (openSUSE-2017-650)
This update to libupnp 1.6.21 fixes the following security issues : - various string handling issues bsc898167 - CVE-2016-8863: out-of-bounds access bsc1006256 - CVE-2016-6255: fix for file write via POST bsc989948 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
DEBIAN-CVE-2014-9983
Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...
CVE-2014-9983
Directory Traversal exists in RAR 4.x and 5.x because an unpack operation follows any symlinks, including symlinks contained in the archive. This allows remote attackers to write to arbitrary files via a crafted archive...
File Write Vulnerability in tpshop2.0 Backend
TPshop open source mall system Thinkphp shop for short , is a set of Shenzhen Soleil Networks Ltd. developed a set of multi- merchant model of the mall system . tpshop2.0 background file write vulnerability allows attackers to exploit the vulnerability to write arbitrary files...
openSUSE Security Update : sudo (openSUSE-2017-636)
This update for sudo fixes the following issues : CVE-2017-1000367 : - Due to incorrect assumptions in /proc/pid/stat parsing, a local attacker can pretend that his tty is any file on the filesystem, thus gaining arbitrary file write access on SELinux-enabled systems. bsc1039361 - Fix FQDN for...
SUSE SLED12 / SLES12 Security Update : sudo (SUSE-SU-2017:1450-1)
This update for sudo fixes the following issues: CVE-2017-1000367 : - Due to incorrect assumptions in /proc/pid/stat parsing, a local attacker can pretend that his tty is any file on the filesystem, thus gaining arbitrary file write access on SELinux-enabled systems. bsc1039361 - Fix FQDN for...
SUSE SLED12 / SLES12 Security Update : sudo (SUSE-SU-2017:1446-1)
This update for sudo fixes the following issues: CVE-2017-1000367 : - Due to incorrect assumptions in /proc/pid/stat parsing, a local attacker can pretend that his tty is any file on the filesystem, thus gaining arbitrary file write access on SELinux-enabled systems. bsc1039361 - Fix FQDN for...
CVE-2017-9034
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates...
CVE-2017-9034
Trend Micro ServerProtect for Linux 3.0 before CP 1531 allows attackers to write to arbitrary files and consequently execute arbitrary code with root privileges by leveraging failure to validate software updates...
Arbitrary File Write Vulnerability in HelpEditer.aspx File of MicroXia Online Learning Platform
Micro Xia Online Learning Platform is an online education system based on B/S architecture. A write shell vulnerability exists in the 'HelpEditer.aspx' file of MicroXia Online Learning Platform. It allows remote attackers to gain server privileges by constructing a malicious data stream to write ...
Kodi Directory Traversal Vulnerability
Kodi is an open source media player developed by the XBMC Foundation that supports playback of most videos, music, podcasts, and a variety of common digital media files from local or networked storage devices. A directory traversal vulnerability exists in the 'Zip Extraction built-in' function in...
Trend Micro ServerProtect for Linux Arbitrary File Write Vulnerability
Trend Micro ServerProtect for Linux is a Trend Micro Trend Micro company for Linux in the virus before reaching the end-user to be blocked to prevent the expansion of the entire network of antivirus software. A security vulnerability exists in Trend Micro ServerProtect for Linux version 3.0. The...
DEBIAN-CVE-2017-8314
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles...
CVE-2017-8314
Directory Traversal in Zip Extraction built-in function in Kodi 17.1 and earlier allows arbitrary file write on disk via a Zip file as subtitles...
