Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 13 Oct 2026 04:31:56 +0000 EUVD-2026-25403 https://cve.radiocsirt.org/vuln/euvd-2026-25403 EUVD-2026-25403 https://cve.radiocsirt.org/vuln/euvd-2026-25403 fkie_cve-2021-27197 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27197 <p>DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn&#39;t check if it&#39;s being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with &#34;OBJECT classid=&#34; and &#34;&lt;SCRIPT language=&#39;vbscript&#39;&gt;&#34;) to overwrite arbitrary files.</p> <p>DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn&#39;t check if it&#39;s being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with &#34;OBJECT classid=&#34; and &#34;&lt;SCRIPT language=&#39;vbscript&#39;&gt;&#34;) to overwrite arbitrary files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-27197 GHSA-gc59-gfp7-vrrr https://cve.radiocsirt.org/vuln/ghsa-gc59-gfp7-vrrr <p>DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn&#39;t check if it&#39;s being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with &#34;OBJECT classid=&#34; and &#34;&lt;SCRIPT language=&#39;vbscript&#39;&gt;&#34;) to overwrite arbitrary files.</p> <p>DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn&#39;t check if it&#39;s being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with &#34;OBJECT classid=&#34; and &#34;&lt;SCRIPT language=&#39;vbscript&#39;&gt;&#34;) to overwrite arbitrary files.</p> https://cve.radiocsirt.org/vuln/ghsa-gc59-gfp7-vrrr gsd-2021-27197 https://cve.radiocsirt.org/vuln/gsd-2021-27197 gsd-2021-27197 https://cve.radiocsirt.org/vuln/gsd-2021-27197