6622 matches found
CVE-2021-23022: Incorrect Permission Assignment for Critical Resource
On version 7.2.1.x before 7.2.1.3 and 7.1.x before 7.1.9.9 Update 1, the BIG-IP Edge Client Windows Installer Service's temporary folder has weak file and folder permissions. Note: Software versions which have reached End of Technical Support EoTS are not evaluated...
PT-2021-7954
Name of the Vulnerable Software and Affected Versions WPanel 4 versions 4.3.1 and below Description The issue is related to the lack of restrictions on file uploads, allowing a remote attacker to execute arbitrary code by uploading a malicious PHP file. This can be done through various image uplo...
Advantech WebAccess Node has a Logic Flaw Vulnerability
Advantech WebAccess Node is a software for monitoring PLCs and other devices from Advantech in Taiwan, China. The product can realize real-time control of equipment status by monitoring PLC and other devices. A logic flaw vulnerability exists in Advantech WebAccess Node. An attacker can exploit...
CVE-2021-22733
Improper Privilege Management vulnerability exists in homeLYnk Wiser For KNX and spaceLYnk V2.60 and prior which could cause shell access when unauthorized code is loaded into the system folder...
CVE-2020-9452
An issue was discovered in Acronis True Image 2020 24.5.22510. antiransomwareservice.exe includes functionality to quarantine files by copying a suspected ransomware file from one directory to another using SYSTEM privileges. Because unprivileged users have write permissions in the quarantine...
FusionPBX Path Traversal Vulnerability (CNVD-2021-36593)
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. FusionPBX 4.5.7 suffers from a path traversal vulnerability that allows remote malicious...
Directory traversal
Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php...
Directory traversal
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the 1 folder, 2 filename, and 3 newfilename variables in app\edit\filerename.php...
CVE-2020-21057
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php...
CVE-2020-21056
Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php...
CVE-2020-21057: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/folderdelete.php...
CVE-2020-21056: Improper Limitation of a Pathname to a Restricted Directory
Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\foldernew.php...
FusionPBX 路径遍历漏洞
FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A security vulnerability exists in FusionPBX 4.5.7 that allows a remote malicious user to...
PT-2021-10579
Name of the Vulnerable Software and Affected Versions: FusionPBX version 4.5.7 Description: A Directory Traversal issue exists, allowing a remote malicious user to create folders via the folder variable to "appeditfoldernew.php". Recommendations: For FusionPBX version 4.5.7, consider restricting...
CVE-2020-21055: Improper Limitation of a Pathname to a Restricted Directory
A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the 1 folder, 2 filename, and 3 newfilename variables in app\edit\filerename.php...
Denial of service due to insecure folder permissions
...
openSUSE Security Update : syncthing (openSUSE-2021-688)
"This update for syncthing fixes the following issues : Update to 1.15.0/1.15.1 - This release fixes a vulnerability where Syncthing and the relay server can crash due to malformed relay protocol messages CVE-2021-21404 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...
CVE-2021-28649
An incorrect permission vulnerability in the product installer for Trend Micro HouseCall for Home Networks version 5.3.1179 and below could allow an attacker to escalate privileges by placing arbitrary code on a specified folder and have that code be executed by an Administrator who is running a...
Ivanti Avalanche目录遍历漏洞
SSD Advisory – Ivanti Avalanche Directory Traversal May 11, 2021 SSD Disclosure / Technical Lead Uncategorized TL;DR Find out how a directory traversal vulnerability in Ivanti Avalanche allows remote unauthenticated user to access files that reside outside the ‘image’ folder. Vulnerability Summar...