CWE-73 Archives - CVE Vulnerability

CVE-2008-5764

Sun, 26 Feb 2023 09:11:10 +0000

PHP remote file inclusion vulnerability in calendar.php in WorkSimple 1.2.1, when register_globals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the lang parameter.

The post CVE-2008-5764 appeared first on CVE Vulnerability.

CVE-2008-5748

Sun, 26 Feb 2023 09:11:09 +0000

Directory traversal vulnerability in plugins/spaw2/dialogs/dialog.php in BloofoxCMS 0.3.4 allows remote attackers to read arbitrary files via the (1) lang, (2) theme, and (3) module parameters.

The post CVE-2008-5748 appeared first on CVE Vulnerability.

CVE-2020-15264

Sun, 26 Feb 2023 06:37:46 +0000

The Boxstarter installer before version 2.13.0 configures C:ProgramDataBoxstarter to be in the system-wide PATH environment variable. However, this directory is writable by normal, unprivileged users. To exploit the vulnerability, place a DLL in this directory that a privileged service is looking for. For example, WptsExtensions.dll When Windows starts, it’ll execute the code in DllMain() with SYSTEM privileges. Any unprivileged user can execute code with SYSTEM privileges. The issue is fixed in version 3.13.0

The post CVE-2020-15264 appeared first on CVE Vulnerability.

CVE-2019-3681

Sun, 26 Feb 2023 06:33:12 +0000

A External Control of File Name or Path vulnerability in osc of SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise Software Development Kit 12-SP5, SUSE Linux Enterprise Software Development Kit 12-SP4; openSUSE Leap 15.1, openSUSE Factory allowed remote attackers that can change downloaded packages to overwrite arbitrary files. This issue affects: SUSE Linux Enterprise Module for Development Tools 15 osc versions prior to 0.169.1-3.20.1. SUSE Linux Enterprise Software Development Kit 12-SP5 osc versions prior to 0.162.1-15.9.1. SUSE Linux Enterprise Software Development Kit 12-SP4 osc versions prior to 0.162.1-15.9.1. openSUSE Leap 15.1 osc versions prior to 0.169.1-lp151.2.15.1. openSUSE Factory osc versions prior to 0.169.0 .

The post CVE-2019-3681 appeared first on CVE Vulnerability.

CVE-2021-38477

Thu, 23 Feb 2023 14:11:13 +0000

There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipulation and/or the deletion of files.

The post CVE-2021-38477 appeared first on CVE Vulnerability.

CVE-2021-3845

Thu, 23 Feb 2023 14:11:12 +0000

ws-scrcpy is vulnerable to External Control of File Name or Path

The post CVE-2021-3845 appeared first on CVE Vulnerability.

CVE-2021-27250

Thu, 23 Feb 2023 14:08:31 +0000

This vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 v1.01rc001 Wi-Fi access points. Authentication is not required to exploit this vulnerability. The specific flaw exists within the processing of CGI scripts. When parsing the errorpage request parameter, the process does not properly validate a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to disclose stored credentials, leading to further compromise. Was ZDI-CAN-11856.

The post CVE-2021-27250 appeared first on CVE Vulnerability.

CVE-2021-24966

Thu, 23 Feb 2023 14:08:01 +0000

The Error Log Viewer WordPress plugin through 1.1.1 does not validate the path of the log file to clear, allowing high privilege users to clear arbitrary files on the web server, including those outside of the blog folder

The post CVE-2021-24966 appeared first on CVE Vulnerability.

CVE-2021-21343

Thu, 23 Feb 2023 14:06:59 +0000

XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on these type information. An attacker can manipulate the processed input stream and replace or inject objects, that result in the deletion of a file on the local host. No user is affected, who followed the recommendation to setup XStream’s security framework with a whitelist limited to the minimal required types. If you rely on XStream’s default blacklist of the Security Framework, you will have to use at least version 1.4.16.

The post CVE-2021-21343 appeared first on CVE Vulnerability.

CVE-2022-2400

Thu, 23 Feb 2023 05:03:10 +0000

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0.

The post CVE-2022-2400 appeared first on CVE Vulnerability.