EUVD-2020-23901

Malware in sbrugna...

CVE-2020-36364

An issue was discovered in Smartstore aka SmartStoreNET before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal for copy and delete actions in the ImportController.Create method via a TempFileName field...

CVE-2020-36364

An issue was discovered in Smartstore aka SmartStoreNET before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal for copy and delete actions in the ImportController.Create method via a TempFileName field...

Path traversal

An issue was discovered in Smartstore aka SmartStoreNET before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal for copy and delete actions in the ImportController.Create method via a TempFileName field...

CVE-2020-36364

An issue was discovered in Smartstore aka SmartStoreNET before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal for copy and delete actions in the ImportController.Create method via a TempFileName field...

CVE-2020-36364

An issue was discovered in Smartstore aka SmartStoreNET before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal for copy and delete actions in the ImportController.Create method via a TempFileName field...

CVE-2020-36364: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Smartstore aka SmartStoreNET before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal for copy and delete actions in the ImportController.Create method via a TempFileName field...

PT-2021-12014

Name of the Vulnerable Software and Affected Versions: Smartstore versions prior to 4.1.0 Description: An issue was discovered in the Administration/Controllers/ImportController.cs file, specifically in the ImportController.Create method, which allows path traversal for copy and delete actions vi...

Worry-Free Business Security TempFileName File Read

The vulnerability of the TempFileName parameter in the CGI executable cgiRecvFile.exe exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to read arbitrary files on the target system by sending specially crafted HTTP requests...

Trend Micro Worry-Free Business Security Directory Traversal Vulnerability

Trend Micro Worry-Free Business Security is a suite of enterprise-class information security protection solutions from Trend Micro. The product provides anti-spam, anti-virus, network security and e-mail protection. A security vulnerability exists in the handling of the 'TempFileName' parameter i...

PT-2020-1932

Name of the Vulnerable Software and Affected Versions Trend Micro Worry-Free Business Security versions 9.0 through 10.0 Description The issue exists due to insufficient input validation of the TempFileName parameter in the cgiRecvFile.exe executable of Trend Micro Worry-Free Business Security...

Skybox Platform Directory Traversal Vulnerability

Skybox PlatformAn enterprise-grade network security management platform from US-based Skybox Security. The platform features attack vector analysis, firewall management, vulnerability and threat management, and more. A directory traversal vulnerability exists in...

Directory traversal

An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter...

CVE-2015-9250

An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter...

CVE-2015-9250: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Skybox Platform before 7.5.201. Directory Traversal exists in /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload via the tempFileName parameter...

PT-2018-4562

Name of the Vulnerable Software and Affected Versions Skybox Platform versions prior to 7.5.201 Description An issue exists in the Skybox Platform, where Directory Traversal is possible. This issue affects the /skyboxview/webskybox/attachmentdownload and /skyboxview/webskybox/filedownload API...

Oracle Application Testing Suite ReportImage tempfilename Directory Traversal (CVE-2016-0489)

A directory traversal vulnerability exists in Oracle's Application Testing Suite. The vulnerability is due to insufficient input validation in the Oracle Test Manager component while processing the HTTP request parameter tempfilename. A remote, authenticated attacker could exploit this...

PT-2016-4249

Name of the Vulnerable Software and Affected Versions Oracle Enterprise Manager Grid Control versions 12.4.0.2 through 12.5.0.2 Description The issue affects confidentiality, integrity, and availability. It is related to the Test Manager for Web Apps in the Oracle Application Testing Suite...