15808 matches found
VulnCheck KEV: CVE-2019-18426
A vulnerability in WhatsApp Desktop when paired with WhatsApp for iPhone allows cross-site scripting and local file reading...
PT-2022-7068 · Adobe · Acrobat Reader
Name of the Vulnerable Software and Affected Versions: Acrobat Reader DC versions 17.012.30205 through 22.001.20085 Acrobat Reader DC versions 20.005.3031x and earlier Description: The issue is related to an out-of-bounds read vulnerability when parsing a crafted file, which could result in a rea...
CVE-2022-27838
Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege...
CVE-2022-28775
Improper access control vulnerability in Samsung Flow prior to version 4.8.06.5 allows attacker to write the file without Samsung Flow permission...
CVE-2022-27838
Improper access control vulnerability in FactoryCamera prior to version 2.1.96 allows attacker to access the file with system privilege...
CVE-2022-27836
Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access...
CVE-2022-27837
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...
CVE-2022-27837
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...
CVE-2022-27836
Improper access control and path traversal vulnerability in Storage Manager and Storage Manager Service prior to SMR Apr-2022 Release 1 allow local attackers to access arbitrary system files without a proper permission. The patch adds proper validation logic to prevent arbitrary files access...
CVE-2022-22962
VMware Horizon Agent for Linux prior to 22.x contains a local privilege escalation as a user is able to change the default shared folder location due to a vulnerable symbolic link. Successful exploitation can result in linking to a root owned file...
CVE-2022-27838
Summary: CVE-2022-27838 is an improper access control vulnerability in Samsung FactoryCamera prior to version 2.1.96. An attacker could access a file with system privileges due to insufficient access controls. Affected software: FactoryCamera, versions before 2.1.96. Impact: Access to restricted ...
PT-2022-18626 · Google · Android
Name of the Vulnerable Software and Affected Versions: Android versions prior to 12.5.3.2 in Android R11.0 Android versions prior to 13.0.1.1 in Android S12.0 Description: A vulnerability using PendingIntent in Accessibility allows an attacker to access files with system privilege. Recommendation...
CVE-2022-28544: Improper Limitation of a Pathname to a Restricted Directory
Path traversal vulnerability in unzip method of InstallAgentCommonHelper in Galaxy store prior to version 4.5.40.5 allows attacker to access the file of Galaxy store...
CVE-2022-27837: Improper Control of Generation of Code
A vulnerability using PendingIntent in Accessibility prior to version 12.5.3.2 in Android R11.0 and 13.0.1.1 in Android S12.0 allows attacker to access the file with system privilege...
PT-2022-18627 · Unknown · Factorycamera
Name of the Vulnerable Software and Affected Versions: FactoryCamera versions prior to 2.1.96 Description: The issue is related to improper access control in FactoryCamera, allowing an attacker to access a file with system privilege. Recommendations: For versions prior to 2.1.96, update to versio...
CVE-2022-26877
Asana Desktop vulnerable before 1.6.0: if users load a malicious web page, the app can exfiltrate local files. Root cause: loading an adversarial page triggers data leakage. Affected product/version: Asana Desktop prior to 1.6.0. Impact: potential unauthorized local file access. Remediation: upda...
CVE-2022-22515: Exposure of Resource to Wrong Sphere
A remote, authenticated attacker could utilize the control program of the CODESYS Control runtime system to use the vulnerability in order to read and modify the configuration files of the affected products...
UBUNTU-CVE-2022-28283
The sourceMapURL feature in devtools was missing security checks that would have allowed a webpage to attempt to include local files or other files that should have been inaccessible. This vulnerability affects Firefox 99...