PT-2022-18304 · Jenkins · Jenkins Dbcharts Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins dbCharts Plugin versions 0.5.2 and earlier Description: The issue concerns the storage of JDBC connection passwords in the global configuration file on the Jenkins controller. These passwords are stored unencrypted and can be viewed b...

Directory Traversal

Rust is vulnerable to directory traversal. The vulnerability exists due to a race condition which allows an attacker to access the file system of the application...

PT-2022-1806

Name of the Vulnerable Software and Affected Versions Axeda agent All versions Axeda Desktop Server for Windows All versions Description The issue allows an attacker to send certain commands to a specific port without authentication. Successful exploitation could allow a remote unauthenticated...

CVE-2021-32008 Logged-in Administrator may get unrestricted file system access

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname to restricted directory, allows logged in GateManager admin to delete system Files or Directories...

Execution with Unnecessary Privileges in arc-electron

Impact When the end-user click on the response header that contains a link the target will be opened in ARC new window. This window will have the default preload script loaded which allows the scripts embedded in the link target to execute any logic that ARC has access to from the renderer proces...

PT-2022-28281

Name of the Vulnerable Software and Affected Versions Advanced Rest Client versions prior to 17.0.9 Description The issue allows scripts embedded in a link target to execute any logic that Advanced Rest Client has access to from the renderer process. This includes file system access, data store...

CVE-2022-25010

The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system...

CVE-2022-25010

The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system...

CVE-2022-25010

CVE-2022-25010 affects Stepmania v5.1b2 and earlier, where the /rootfs component in RageFile can be exploited to access the entire file system. Affected software: Stepmania; vulnerable component: RageFile’s /rootfs. Root cause described across sources as lack of privilege restrictions enabling el...

CVE-2022-25010

The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system...

CVE-2022-25010: Incorrect Permission Assignment for Critical Resource

The component /rootfs in RageFile of Stepmania v5.1b2 and below allows attackers access to the entire file system...

CVE-2022-22766

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic...

CVE-2022-22766

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic...

CVE-2022-22766

The CVE-2022-22766 issue affects BD Pyxis medical dispensing devices and related systems. Root cause: use of hard-coded credentials enabling potential access to the device file system and sensitive data (ePHI). Affected products include a wide range of BD Pyxis components (Anesthesia Station ES/4...

PT-2022-15659

Name of the Vulnerable Software and Affected Versions BD Pyxis affected versions not specified Description The issue involves hardcoded credentials in specific BD Pyxis products. If exploited, this could allow threat actors to gain access to the underlying file system. They could potentially...

CVE-2022-22766: Use of Hard-coded Credentials

Hardcoded credentials are used in specific BD Pyxis products. If exploited, threat actors may be able to gain access to the underlying file system and could potentially exploit application files for information that could be used to decrypt application credentials or gain access to electronic...

BD Pyxis 信任管理问题漏洞

BD Pyxis is a medication management system from Bidi Medical BD. BD Pyxis has a security vulnerability that stems from the use of hard-coded credentials in certain BD Pyxis products. If exploited, a threat participant could gain access to the underlying file system and potentially utilize...

PT-2022-15679

Name of the Vulnerable Software and Affected Versions SYNEL - eharmony affected versions not specified Description The issue allows an attacker to perform a Directory Traversal attack, which is aimed at gaining unauthorized access to the file system. By manipulating the Name parameter, an attacke...

PT-2022-8586

Name of the Vulnerable Software and Affected Versions Telos Z/IP One versions through 4.0.0r Description A directory traversal issue allows an unauthenticated individual to gain root level access to the device's file system. This access can be used to identify configuration settings, password...

Design/Logic Flaw

This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg. Using a specially crafted SVG file, an attacker could read arbitrary files from the file system and then show the file content as a converted PNG file...