CVE-2021-25464

CVE-2021-25464 concerns SamsungCapture before 4.8.02. The issue is an improper file management vulnerability that can leak sensitive information. Affected: SamsungCapture versions prior to 4.8.02. Impact indicators in available data include partial confidentiality loss (NVD CVSS 2.0/3.1) with loc...

PT-2021-16654 · Samsung · Samsungcapture

Name of the Vulnerable Software and Affected Versions: SamsungCapture versions prior to 4.8.02 Description: The issue is related to improper file management, which allows for the leak of sensitive information. Recommendations: For versions prior to 4.8.02, update to version 4.8.02 or later to...

Authorization

Central Dogma allows privilege escalation with mirroring to the internal dogma repository that has a file managing the authorization of the project...

FileBrowser 跨站脚本漏洞

FileBrowser is an open source web file browser . Provides a file management interface in a specified directory , can be used to upload , delete , preview , rename and edit your files . FileBrowser suffers from a cross-site scripting vulnerability that is caused by improper validation of...

CVE-2020-18462

File Upload vulnerabilty in AikCms v2.0.0 in posteredit.php because the background file management office does not verify the uploaded file...

Unrestricted file upload

File Upload vulnerabilty in AikCms v2.0.0 in posteredit.php because the background file management office does not verify the uploaded file...

CVE-2020-18462

File Upload vulnerabilty in AikCms v2.0.0 in posteredit.php because the background file management office does not verify the uploaded file...

Directory Traversal Vulnerability in Purple File Management System

Purple Software Systems Ltd. is a company that specializes in making a chain of cloud file management services. A directory traversal vulnerability exists in the Purple File Management System, which can be exploited by attackers to obtain sensitive information...

CVE-2021-25649

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user...

CVE-2021-25652

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities AVPU. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be...

Information disclosure

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Appliance Virtualization Platform Utilities AVPU. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be...

CVE-2021-25649 Avaya Utility Services Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user...

CVE-2021-25649 Avaya Utility Services Sensitive Information Disclosure Vulnerability

An information disclosure vulnerability was discovered in the directory and file management of Avaya Aura Utility Services. This vulnerability may potentially allow any local user to access system functionality and configuration information that should only be available to a privileged user...

June 8, 2021—KB5003637 (OS Builds 19041.1052, 19042.1052, and 19043.1052)

None None...

Path traversal

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors...

CVE-2021-29091

The vulnerability CVE-2021-29091 affects Synology Photo Station prior to 6.8.14-3500. It is a Path Traversal in the file management component that improperly limits the destination path, allowing remote authenticated users to write arbitrary files via unspecified vectors. Impact is information ab...

CVE-2021-29091

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to write arbitrary files via unspecified vectors...

CVE-2021-29092

Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-29092

Unrestricted upload of file with dangerous type vulnerability in file management component in Synology Photo Station before 6.8.14-3500 allows remote authenticated users to execute arbitrary code via unspecified vectors...

CVE-2021-29092

The CVE-2021-29092 issue affects Synology Photo Station (pre-6.8.14-3500). The vulnerability is described as an unrestricted upload of a file with a dangerous type in the file management component, which could allow remote authenticated users to execute arbitrary code via unspecified vectors. Aff...