27 matches found
CVE-2022-31590
SAP PowerDesigner Proxy - version 16.7, allows an attacker with low privileges and has local access, with the ability to work around system’s root disk access restrictions to Write/Create a program file on system disk root path, which could then be executed with elevated privileges of the...
CVE-2022-1359
The CVE-2022-1359 entry describes an arbitrary file-write path traversal vulnerability in Cambium Networks cnMaestro On-Premises. An attacker can supply ../ in a filename to write data to arbitrary server files via a restricted pathname in a specific route. This affects On-Premise cnMaestro and c...
CVE-2021-3722
The CVE-2021-3722 entry affects Lenovo PCManager prior to version 4.0.40.2175. It describes a vulnerability where installation could allow configuration files to be written to non-standard locations, impacting availability. The connected documents provide no details on exploit steps, affected pro...
CVE-2016-4386
HPE Network Automation Software 10.10 allows local users to write to arbitrary files via unspecified vectors...
PHP 5.3 'mail.log' Configuration Option 'open_basedir' Restriction Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/36007/info PHP is prone to an 'openbasedir' restriction-bypass vulnerability because of a design error. Successful exploits could allow an attacker to write files in unauthorized locations. This vulnerability would be an...
PHP 4.x - copy() Safe_Mode Bypass
PHP 4.x - copy SafeMode Bypass source: https://www.securityfocus.com/bid/17439/info PHP is prone to multiple 'safemode' and 'openbasedir' restriction-bypass vulnerabilities. Successful exploits could allow an attacker to access sensitive information or to write files in unauthorized locations...
