CVE-2014-5319

MediumCVSS 6.4/10Last modified Jun 17, 2026

Description

Directory traversal vulnerability in the S-Link SLFileManager application 1.2.5 and earlier for Android allows remote attackers to write to files via unspecified vectors.

Metrics

CVSS 2.0 6.4/10AV:N/AC:L/Au:N/C:N/I:P/A:P

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://jvn.jp/en/jp/JVN16485017/995479/index.htmlVendor Advisory
http://jvn.jp/en/jp/JVN16485017/index.htmlVendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000107Vendor Advisory
http://www.securityfocus.com/bid/70147
http://jvn.jp/en/jp/JVN16485017/995479/index.htmlVendor Advisory
http://jvn.jp/en/jp/JVN16485017/index.htmlVendor Advisory
http://jvndb.jvn.jp/jvndb/JVNDB-2014-000107Vendor Advisory
http://www.securityfocus.com/bid/70147

Timeline

Published: Sep 26, 2014
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2014

CVE-2014-53205.0The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name informatio CVE-2014-53215.8FileMaker Pro before 13 and Pro Advanced before 13 does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attac CVE-2014-53224.3Cross-site scripting (XSS) vulnerability in the Instant Web Publish function in FileMaker Pro before 13 and Pro Advanced before 13 allows re CVE-2014-53235.4The Yuko Yuko (aka jp.co.yukoyuko.android.yukoyuko_android) application 1.0.5 and earlier for Android does not verify X.509 certificates fro CVE-2014-53246.5Unrestricted file upload vulnerability in the N-Media file uploader plugin before 3.4 for WordPress allows remote authenticated users to exe CVE-2014-53255.0The (1) DOMConverter, (2) JDOMConverter, (3) DOM4JConverter, and (4) XOMConverter functions in Direct Web Remoting (DWR) through 2.0.10 and CVE-2014-53264.3Cross-site scripting (XSS) vulnerability in Direct Web Remoting (DWR) through 2.0.10 and 3.x through 3.0.RC2 allows remote attackers to inje CVE-2014-53276.8Buffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080 allows remote authenticated users to cause a CVE-2014-53286.8Buffer overflow in the Webserver component on the Huawei E5332 router before 21.344.27.00.1080 allows remote authenticated users to cause a CVE-2014-53297.5GIGAPOD file servers (Appliance model and Software model) provide two web interfaces, 80/tcp and 443/tcp for user operation, and 8001/tcp fo CVE-2014-53304.3Cross-site scripting (XSS) vulnerability in BirdBlog allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.CVE-2014-53314.3Cross-site scripting (XSS) vulnerability in Aflax allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.