CVE-2026-117471

Psono Server CE && EE versions 0.1.0 through 7.2.3 accepted a user-controlled host when configuring a personal Duo device and passed it to the Duo client without an allowlist or explicit timeout. An authenticated remote attacker could cause the server to connect to selected hosts over HTTPS on po...

EUVD-2023-24408

Malicious code in bioql PyPI...

CryptoService File Modification

The vulnerability of the CryptoService function in software for monitoring the status of devices connected to a network, Cisco Duo Device Health, is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to modify...

CVE-2023-20229

A vulnerability in the CryptoService function of Cisco Duo Device Health Application for Windows could allow an authenticated, local attacker with low privileges to conduct directory traversal attacks and overwrite arbitrary files on an affected system. This vulnerability is due to insufficient...

CVE-2023-20229

A vulnerability in the CryptoService function of Cisco Duo Device Health Application for Windows could allow an authenticated, local attacker with low privileges to conduct directory traversal attacks and overwrite arbitrary files on an affected system. This vulnerability is due to insufficient...

CVE-2023-20229: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the CryptoService function of Cisco Duo Device Health Application for Windows could allow an authenticated, local attacker with low privileges to conduct directory traversal attacks and overwrite arbitrary files on an affected system. This vulnerability is due to insufficient...

Western Digital WD My

The vulnerability of the microprogrammed software in Western Digital WD My Book Live and WD My Book Live Duo storage devices is related to deficiencies in authentication procedures. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...