14581 matches found
Apple macOS 安全漏洞
Apple macOS is a set of specialized operating systems developed for Mac computers by the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.2. An attacker exploiting the vulnerability can access arbitrary files...
The vulnerability of Microsoft Office packages arises from the improper handling of symbolic links before accessing a file, allowing attackers to exploit their privileges.
The vulnerability of Microsoft Office packages is related to the incorrect definition of symbolic links before accessing a file. Exploiting this vulnerability can allow an attacker to increase their privileges...
Ubuntu 16.04 LTS / 18.04 LTS : PHP vulnerability (USN-7153-1)
The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-7153-1 advisory. It was discovered that PHP incorrectly handled long string inputs in two database drivers. An attacker could possibly use this issue to write files in...
CVE-2024-55602 PenDoc vulnerable to Arbitrary File Read on updating and downloading templates using Path Traversal
PwnDoc is a penetration test report generator. Prior to commit 1d4219c596f4f518798492e48386a20c6e9a2fe6, an authenticated user who is able to update and download templates can inject path traversal ../ sequences into the file extension property to read arbitrary files on the system. Commit...
CVE-2024-10708
The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the server...
CVE-2024-37143
Dell PowerFlex appliance versions prior to IC 46.381.00 and IC 46.376.00, Dell PowerFlex rack versions prior to RCM 3.8.1.0 for RCM 3.8.x train and prior to RCM 3.7.6.0 for RCM 3.7.x train, Dell PowerFlex custom node using PowerFlex Manager versions prior to 4.6.1.0, Dell InsightIQ versions prior...
CVE-2024-47578
Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side...
CVE-2024-47580 Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or...
CVE-2024-47580 Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
An attacker authenticated as an administrator can use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an internal server file and subsequently downloading the generated PDF, the attacker can read any file on the server with no effect on integrity or...
CVE-2024-47579 Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
An attacker authenticated as an administrator can use an exposed webservice to upload or download a custom PDF font file on the system server. Using the upload functionality to copy an internal file into a font file and subsequently using the download functionality to retrieve that file allows th...
CVE-2024-47579
The CVE-2024-47579 entry concerns SAP NetWeaver AS Java. An attacker with administrator privileges can use an exposed webservice to upload or download a custom PDF font file on the system server. The upload can copy an internal file into a font file, and the download can retrieve that file, allow...
CVE-2024-47578 Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Document Services)
Adobe Document Service allows an attacker with administrator privileges to send a crafted request from a vulnerable web application. It is usually used to target internal systems behind firewalls that are normally inaccessible to an attacker from the external network, resulting in a Server-Side...
CVE-2024-47578
CVE-2024-47578 affects SAP NetWeaver AS Java and Adobe Document Service. A vulnerability in Adobe Document Service allows an attacker with administrator privileges to craft a request from a vulnerable web application, used to target internal systems behind firewalls, resulting in a Server-Side Re...
PT-2024-9407 · Sap · Sap Netweaver As Java
Name of the Vulnerable Software and Affected Versions: SAP NetWeaver AS for Java affected versions not specified Description: The issue allows an attacker authenticated as an administrator to use an exposed webservice to create a PDF with an embedded attachment. By specifying the file to be an...
PT-2024-9382 · Microsoft · Office
Name of the Vulnerable Software and Affected Versions: Microsoft Office affected versions not specified Description: The issue is related to an elevation of privilege vulnerability in Microsoft Office. It is caused by incorrect handling of symbolic links before accessing a file. Exploitation of...
The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliance, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse lies in the improper handling of file access links. This allows attackers to execute arbitrary code.
The vulnerability of hardware and software solutions for data storage and information processing in Dell PowerFlex Appliance, PowerFlex Rack, PowerFlex Custom Node, InsightIQ, and Data Lakehouse lies in the improper handling of file access links. Exploiting this vulnerability allows a remote...
WordPress plugin System Dashboard 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
PT-2024-33656 · Siemens · Comos
Name of the Vulnerable Software and Affected Versions: COMOS V10.3 versions prior to V10.3.3.5.8 COMOS V10.4.0 versions prior to V10.4.4.2 COMOS V10.4.1 versions prior to V10.4.4.2 COMOS V10.4.2 versions prior to V10.4.4.2 COMOS V10.4.3 versions prior to V10.4.3.0.47 COMOS V10.4.4 versions prior ...