982 matches found
PT-2023-6114 · A10 · A10 Thunder Adc
Name of the Vulnerable Software and Affected Versions: A10 Thunder ADC affected versions not specified Description: The issue is related to the FileMgmtExport class in the Advanced Core Operating System ACOS of A10 Thunder ADC controllers, where there is improper restriction of a directory path...
CVE-2023-40454
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to delete files for which it does not have permission...
CVE-2023-40454
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to delete files for which it does not have permission...
EDRaser - Tool For Remotely Deleting Access Logs, Windows Event Logs, Databases, And Other Files
EDRaser is a powerful tool for remotely deleting access logs, Windows event logs, databases, and other files on remote machines. It offers two modes of operation: automated and manual. Automated Mode In automated mode, EDRaser scans the C class of a given address space of IPs for vulnerable syste...
Trellix Data Loss Prevention Security Vulnerability
Trellix Data Loss Prevention Trellix DLP is a data loss prevention solution from American FireEye Trellix. It provides comprehensive scanning of inbound and outbound network traffic on all ports, protocols, etc. A security vulnerability exists in Trellix Data Loss Prevention version 11.10.100.17,...
PT-2023-5507 · Lg · Lg Simple Editor
Name of the Vulnerable Software and Affected Versions: LG Simple Editor affected versions not specified Description: The issue arises from an input validation error in the cropImage function when handling directory traversal sequences in the command-line interface. This allows a remote attacker t...
ASUSTOR Data Master 路径遍历漏洞
ASUSTOR Data Master is a specialized operating system on ASUSTOR NAS from ASUS, China. An input validation error vulnerability exists in ASUSTOR Data Master, which stems from the Printer service's inability to adequately process user input, and can be exploited by an attacker to navigate to anoth...
MOXA TN-4900 路径遍历漏洞
MOXA TN-4900 is a series of industrial firewall routers from MOXA, China.MOXA TN-5900 is a series of industrial firewall routers from MOXA, China. A command injection vulnerability exists in the MOXA TN-4900 and TN-5900, which can be exploited by an attacker to delete arbitrary files...
CVE-2023-3160
The vulnerability potentially allows an attacker to misuse ESET’s file operations during the module update to delete or move files without having proper permissions...
ESET Eset Endpoint Antivirus and Eset Server Security Security Vulnerabilities
ESET Eset Endpoint Antivirus and Eset Server Security are both products of ESET Slovakia.Eset Endpoint Antivirus is an on-premise and cloud-based anti-malware and security suite for small, medium and large organizations. Used for anti-malware, remote management, endpoint security, file security,...
PrestaShop Input Validation Error Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. An input validation error vulnerability exists in PrestaShop versions prior to 8.1.1, which stems from a...
PrestaShop Path Traversal Vulnerability
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides multiple payment methods, short message alerts and product image scaling. A path traversal vulnerability exists in PrestaShop versions prior to 8.1.1, which stems from the presence o...
CVE-2023-33369
A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure filesystem, causing a denial of service...
Path traversal
A path traversal vulnerability exists in Control ID IDSecure 4.7.26.0 and prior, allowing attackers to delete arbitrary files on IDSecure filesystem, causing a denial of service...
CVE-2023-4052
The Firefox updater created a directory writable by non-privileged users. When uninstalling Firefox, any files in that directory would be recursively deleted with the permissions of the uninstalling user account. This could be combined with creation of a junction a form of symbolic link to allow...
WordPress plugin User Registration 代码问题漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code issue vulnerability exists in...
CVE-2023-26563
The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: - On Windows, list files in any directory, read any file, delete any file, upload any file to any directory accessible by the web server. - On...
CVE-2023-26563
The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an unauthenticated attacker can: - On Windows, list files in any directory, read any file, delete any file, upload any file to any directory accessible by the web server. - On...
GHSA-2Q4P-F6GF-MQR5 Graylog server has partial path traversal vulnerability in Support Bundle feature
A partial path traversal vulnerability exists in Graylog's Support Bundle feature. The vulnerability is caused by incorrect user input validation in an HTTP API resource. Thanks to weiweiwei9811 for reporting this vulnerability and providing detailed information. Impact Graylog's Support Bundle...