419 matches found
CVE-2017-15895: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the SYNO.FileStation.Extract in Synology Router Manager SRM before 1.1.5-6542-4 allows remote authenticated users to write arbitrary files via the destfolderpath parameter...
PT-2017-12499
Name of the Vulnerable Software and Affected Versions Cisco NX-OS System Software affected versions not specified Description A vulnerability in the patch installation process of Cisco NX-OS System Software could allow an authenticated, local attacker to write a file to arbitrary locations. This ...
PT-2017-17298
Name of the Vulnerable Software and Affected Versions Cisco Prime Collaboration Provisioning Tool version 12.1 Description A vulnerability in the UpgradeManager could allow an authenticated, remote attacker to write arbitrary files as root on the system due to insufficient input validation. An...
RAR Path Traversal Vulnerability
RAR is a compressed file format. A path traversal vulnerability exists in versions 4.x and 5.x of RAR. A remote attacker can exploit this vulnerability to write arbitrary files with the help of a specially crafted archive file...
CVE-2017-9097
In Anti-Web through 3.8.7, as used on NetBiter FGW200 devices through 3.21.2, WS100 devices through 3.30.5, EC150 devices through 1.40.0, WS200 devices through 3.30.4, EC250 devices through 1.40.0, and other products, an LFI vulnerability allows a remote attacker to read or modify files through a...
CVE-2016-10173: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in the minitar before 0.6 and archive-tar-minitar 0.5.2 gems for Ruby allows remote attackers to write to arbitrary files via a .. dot dot in a TAR archive entry...
PT-2017-9227
Name of the Vulnerable Software and Affected Versions docker2aci versions prior to 0.13.0 Description The issue allows remote attackers to write to arbitrary files via a .. dot dot in the embedded layer data in an image. This is due to a directory traversal vulnerability. Recommendations For...
PT-2017-3538
Name of the Vulnerable Software and Affected Versions: HPE Intelligent Management Center iMC PLAT version 7.3 E0504P04 Description: A Remote Code Execution issue was discovered, related to the dbman service in HPE Intelligent Management Center PLAT. The vulnerability is associated with incorrect...
PT-2016-7344
Name of the Vulnerable Software and Affected Versions VMware vRealize Operations versions prior to 6.4.0 Description The issue allows remote authenticated users to write arbitrary content to files or rename files via a crafted DiskFileItem in a relay-request payload that is mishandled during...
PT-2016-6522
Name of the Vulnerable Software and Affected Versions Oracle Fusion Middleware 8.1 Description The issue affects confidentiality, integrity, and availability. It is reportedly related to a directory traversal vulnerability, which may allow local users with certain permissions to write to arbitrar...
CVE-2016-6405
Cisco Fog Director 1.00 for IOx allows remote authenticated users to bypass intended access restrictions and write to arbitrary files via the Cartridge interface, aka Bug ID CSCuz89368...
Novell Filr Directory Traversal Vulnerability
Novell Filr is a file access and sharing solution for the enterprise from Novell, USA. A directory traversal vulnerability exists in the email-template feature in Novell Filr 1.2 Security Update 2 and earlier and 2.0 Security Update 1 and earlier. A remote attacker could leverage the '...' in the...
PT-2016-2291
Name of the Vulnerable Software and Affected Versions GNU wget versions prior to 1.18 PAN-OS versions prior to 6.1.17 PAN-OS versions prior to 7.0.15 PAN-OS versions prior to 7.1.10 PAN-OS versions prior to 8.0.1 Description The issue is related to errors in security settings, allowing remote...
CVE-2015-0861
model/modelstorage.py in trytond 3.2.x before 3.2.10, 3.4.x before 3.4.8, 3.6.x before 3.6.5, and 3.8.x before 3.8.1 allows remote authenticated users to bypass intended access restrictions and write to arbitrary fields via a sequence of records...
IBM Spectrum Scale (GPFS) Hadoop Connector Vulnerable
IBM Spectrum Scale and General Parallel File System GPFS is a scalable data and file management solution based on IBM GPFS an enterprise file management system optimized for petabyte-scale storage management from IBM, USA. The solution helps customers reduce storage costs while improving security...
Google Chrome < 47.0.2526.80 Multiple Vulnerabilities
The version of Google Chrome installed on the remote Windows host is prior to 47.0.2526.80. It is, therefore, affected by multiple vulnerabilities : - A type confusion error exists related to extensions that allows an attacker to have an unspecified impact. CVE-2015-6788 - A use-after-free error...
PT-2015-7022
Name of the Vulnerable Software and Affected Versions Avast versions prior to 150918-0 Description A directory traversal issue allows remote attackers to delete or write to arbitrary files by crafting a specific entry in a ZIP archive. Recommendations For versions prior to 150918-0, update to...
PT-2015-7106
Name of the Vulnerable Software and Affected Versions QNAP QTS versions prior to 4.1.4 build 0910 QNAP QTS versions 4.2.x prior to 4.2.0 RC2 build 0910 Description A directory traversal issue exists when AFP is enabled, allowing remote attackers to read or write to arbitrary files by leveraging...
PT-2015-5941
Name of the Vulnerable Software and Affected Versions Datalex airline booking software versions prior to 2015-09-03 Description The issue allows remote attackers to read or write to arbitrary user data. This can be achieved by modifying the profileId parameter in specific API endpoints, such as...