PartKeepr 信息泄露漏洞

PartKeepr is an inventory management software designed primarily for electronic components. a security vulnerability exists in PartKeepr, which stems from the use of a file:// URL that allows attachments to be loaded when creating parts, which can be exploited by an authenticated attacker to read...

Samsung Mobile Device输入验证错误漏洞

Samsung Mobile is a cell phone from the South Korean company Samsung. An arbitrary file access vulnerability exists in Samsung Mobile DressRoom, which stems from incorrect cleaning of the Incoming Intent in Dressroom, and can be exploited by a local attacker to read and write arbitrary files...

CVE-2021-45231: Improper Link Resolution Before File Access

A link following privilege escalation vulnerability in Trend Micro Apex One on-prem and SaaS and Trend Micro Worry-Free Business Security 10.0 SP1 and Services could allow a local attacker to create a specially crafted file with arbitrary content which could grant local privilege escalation on th...

CVE-2022-22287

Samsung Email before 6.1.60.16 is affected by an arbitrary file access vulnerability that allows reading isolated data in the sandbox. The root cause is described as arbitrary file access, with impact limited to reading sandboxed data. The exposed version range is prior to 6.1.60.16; remediation ...

CVE-2022-22287

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox...

Weak Encryption

session-file-store is vulnerable to a weak encryption implementation. The encryption library uses the a hardcoded key as the ciper, bypassing the point of encrypting the files to begin with. A malicious user can decrypt and get access...

PT-2022-15642 · Partkeepr · Partkeepr

Name of the Vulnerable Software and Affected Versions: PartKeepr versions up to v1.4.0 Description: The issue allows an authenticated user to read local files by utilizing the 'file://' URI scheme when loading attachments using a URL while creating a part. Recommendations: For versions up to...

CVE-2022-22287: Improper Input Validation

Abitrary file access vulnerability in Samsung Email prior to 6.1.60.16 allows attacker to read isolated data in sandbox...

Apache James 路径遍历漏洞

Apache James is an open source Smtp and Pop3 mail transfer agent and Nntp news server written entirely in Java by the Apache Foundation. Apache James in version 3.6.1 contains a path traversal vulnerability that stems from a failure of a networked system or product to properly filter special...

CVE-2021-39982

Phone Manager application has a Improper Privilege Management vulnerability.Successful exploitation of this vulnerability may read and write arbitrary files by tampering with Phone Manager notifications...

CVE-2021-39969

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-39969

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-37133

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-37133

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-39969

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-39969

CVE-2021-39969: An Unauthorized file access vulnerability in Huawei HarmonyOS, specifically affecting the VoWifi component within HarmonyOS smartphones. The vulnerability enables network-based access with no authentication, is rated CVSS‑3.1 base score 7.5 (HIGH) with High Confidentiality impact ...

CVE-2021-37133

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-37133

CVE-2021-37133 is linked to Huawei HarmonyOS environments involving the HAL card component where unauthorized access could lead to confidentiality exposure. The connected CNVD/CNNVD entries describe an unauthorized access vulnerability affecting HarmonyOS HAL card components, indicating a confide...