https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 14 Oct 2026 12:12:06 +0000 https://cve.radiocsirt.org/vuln/cve-2021-27197 <p>DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn&#39;t check if it&#39;s being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with &#34;OBJECT classid=&#34; and &#34;&lt;SCRIPT language=&#39;vbscript&#39;&gt;&#34;) to overwrite arbitrary files.</p> <p>DSUtility.dll in Pelco Digital Sentry Server before 7.19.67 has an arbitrary file write vulnerability. The AppendToTextFile method doesn&#39;t check if it&#39;s being called from the application or from a malicious user. The vulnerability is triggered when a remote attacker crafts an HTML page (e.g., with &#34;OBJECT classid=&#34; and &#34;&lt;SCRIPT language=&#39;vbscript&#39;&gt;&#34;) to overwrite arbitrary files.</p> https://cve.radiocsirt.org/vuln/cve-2021-27197