63 matches found
CVE-2026-111854
An issue was discovered on Tektronix 3 Series MDO devices before 1.21.1. A path traversal vulnerability in the SCPI FILESystem command interface allows remote attackers to read or modify arbitrary files on the device through insufficient validation of file paths supplied to filesystem access...
CVE-2026-16064: Incorrect Authorization
The Event Booking Manager for WooCommerce WordPress plugin before 5.3.7 does not properly verify authorization on the object being modified when quick-editing events, only checking a global capability, allowing users with the Contributor role and above to modify the title and publication status o...
CVE-2026-14214: Improper Authentication
The Booking for Appointments and Events Calendar WordPress plugin before 2.4.4 does not restrict which fields can be written through its customer import, allowing a user with the Amelia Manager role to modify arbitrary columns of any stored user record by supplying them in the import request...
Samba NTFS Reparse Point
The vulnerability of the NTFS reparse point mechanism in Samba software is related to access control deficiencies. Exploiting this vulnerability allows a remote attacker to modify arbitrary files...
Samba vfs_worm module file modification
The vulnerability of the vfsworm module in Samba software is related to improper handling of insufficient permissions or privileges. Exploiting this vulnerability allows a remote attacker to modify arbitrary files...
CVE-2025-12071: Authorization Bypass Through User-Controlled Key
The Frontend User Notes plugin for WordPress is vulnerable to Insecure Direct Object Reference in all versions up to, and including, 2.1.0 via the 'funpajaxmodifynotes' AJAX endpoint due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with...
Race condition in xterm allows local users to modify arbitrary files via the logging option.
...
CVE-2025-42977: Improper Limitation of a Pathname to a Restricted Directory
SAP NetWeaver Visual Composer contains a Directory Traversal vulnerability caused by insufficient validation of input paths provided by a high-privileged user. This allows an attacker to read or modify arbitrary files, resulting in a high impact on confidentiality and a low impact on integrity...
Beta Access Utility Arbitrary File Modification
The vulnerability of the Beta Access Utility component of the macOS operating system is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify arbitrary files...
PT-2023-16246
Name of the Vulnerable Software and Affected Versions The GPT AI Power: Content Writer & ChatGPT & Image Generator & WooCommerce Product Writer & AI Training WordPress plugin versions prior to 1.4.38 Description The issue concerns the lack of nonce or privilege checks, allowing logged-in users to...
Archive_Tar: directory traversal due to inadequate checking of symbolic links
A flaw was found in the ArchiveTar package. ArchiveTar could allow a remote attacker to traverse directories on the system caused by inadequate checking of symbolic links. An attacker could send a specially-crafted URL request to the Tar.php script containing "dot dot" sequences /../ to modify...
Apache Struts Access Control File Modification
The vulnerability of the Apache Struts software platform is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to modify arbitrary files remotely...
PT-2022-4352
Name of the Vulnerable Software and Affected Versions General Bytes Crypto Application Server affected versions not specified Description The issue is related to a cross-site request forgery vulnerability in the General Bytes Crypto Application Server. This could allow a remote attacker to create...
GHSA-9RJ9-5WCV-XGF2 Roundup Improper Access Control
The EditCSVAction function in cgi/actions.py in Roundup 1.2 before 1.2.1, 1.4 through 1.4.6, and possibly other versions does not properly check permissions, which allows remote authenticated users with edit or create privileges for a class to modify arbitrary items within that class, as...
GHSA-V2GW-X5JF-PGWV Mercurial Directory traversal vulnerability
Directory traversal vulnerability in patch.py in Mercurial before 1.0.2 allows user-assisted attackers to modify arbitrary files via ".." dot dot sequences in a patch file...
CVE-2020-35948
An issue was discovered in the XCloner Backup and Restore plugin before 4.2.13 for WordPress. It gave authenticated attackers the ability to modify arbitrary files, including PHP files. Doing so would allow an attacker to achieve remote code execution. The xclonerrestore.php writefileaction could...
PT-2020-20066
Name of the Vulnerable Software and Affected Versions Citrix Gateway Plug-in for Windows versions prior to 13.0-61.49 Citrix Gateway Plug-in for Windows versions prior to 12.1-58.16 Description The issue is related to improper privilege management on services run by the software, allowing an...
PT-2019-17947
Name of the Vulnerable Software and Affected Versions Cybozu Office versions 10.0.0 through 10.8.3 Description A directory traversal issue allows remote authenticated attackers to modify arbitrary files using the Customapp function. Recommendations For Cybozu Office versions 10.0.0 through 10.8.3...
PT-2019-4017
Name of the Vulnerable Software and Affected Versions Windows affected versions not specified Description The issue is related to errors in file creation handling in the iphlpsvc.dll library of the Windows operating system. It allows an attacker to potentially elevate their privileges and modify...