CWE-668

In Android before security patch level 2018-04-05 on Qualcomm Snapdragon Automobile, Snapdragon Mobile, and Snapdragon W

An issue was discovered on the PLANEX CS-QR20 1.30. A hidden and undocumented management page allows an attacker to exec

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Ente

This vulnerability allows remote attackers to delete arbitrary files on vulnerable installations of NetGain Systems Ente

This vulnerability allows remote attackers to overwrite files on vulnerable installations of NetGain Systems Enterprise

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems E

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems E

This vulnerability allows remote attackers to overwrite arbitrary files on vulnerable installations of NetGain Systems E

IBM WebSphere Application Server 8.5 and 9.0 could allow a remote attacker to gain elevated privileges on the system, ca

A local arbitrary file modification vulnerability was identified in HPE Moonshot Provisioning Manager prior to v1.24.

EmpireCMS 6.6 through 7.2 allows remote attackers to discover the full path via an array value for a parameter to class/

YzmCMS 3.6 allows remote attackers to discover the full path via a direct request to application/install/templates/s1.ph

Pages that are rendered using the ESI plugin can have access to the cookie header when the plugin is configured not to a

While investigating bug 60718, it was noticed that some calls to application listeners in Apache Tomcat 9.0.0.M1 to 9.0.

A vulnerability in the Traversal Using Relay NAT (TURN) server included with Cisco Meeting Server (CMS) could allow an a

An issue was discovered in Xen through 4.9.x allowing x86 HVM guest OS users to cause a denial of service (hypervisor cr

ME906s-158 earlier than ME906S_Installer_13.1805.10.3 versions has a privilege elevation vulnerability. An attacker coul

tcpdf before 6.2.0 uploads files from the server generating PDF-files to an external FTP.

Denial of Service vulnerability in Trend Micro Deep Discovery Email Inspector 2.5.1 allows remote attackers to delete ar

Cacti 1.1.27 allows remote authenticated administrators to conduct Remote Code Execution attacks by placing the Log Path

A vulnerability in the Open Agent Container (OAC) feature of Cisco Nexus Series Switches could allow an unauthenticated,

The Norwegian Air Shuttle (aka norwegian.com) airline kiosk allows physically proximate attackers to bypass the intended

A vulnerability was discovered in Siemens OZW672 (all versions) and OZW772 (all versions) that could allow an attacker w

A vulnerability in the guest shell feature of Cisco NX-OS System Software could allow an authenticated, local attacker t

fileio.c in Vim prior to 8.0.1263 sets the group ownership of a .swp file to the editor's primary group (which may be di

In Moodle 2.x and 3.x, searching of arbitrary blogs is possible because a capability check is missing.

Microsoft Windows 10 1607 and Windows Server 2016 allow an attacker to exploit a security feature bypass vulnerability i

A vulnerability in Cisco WebEx Meeting Server could allow an unauthenticated, remote attacker to modify the welcome mess

EVA-L09 smartphones with software Earlier than EVA-L09C25B150CUSTC25D003 versions,Earlier than EVA-L09C440B140 versions,

Huawei smart phones with software earlier than Vicky-AL00AC00B172D versions have a Factory Reset Protection (FRP) bypass

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache file