CVE-2021-37133

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

Opmantek Open-AudIT 路径遍历漏洞

Opmantek Open-AudIT is an open source network discovery and auditing program from Opmantek, Inc. The program intelligently scans networks and network devices and provides status reports.Opmantek Open-AudIT suffers from a path traversal vulnerability that can be exploited by attackers to read file...

PT-2022-10633 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: Smartphones affected versions not specified Description: The issue concerns unauthorized file access, which may impact service confidentiality upon successful exploitation. Recommendations: At the moment, there is no information about a newer...

CVE-2021-39969: Undefined Security Weakness

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

PT-2022-11096 · Huawei · Emui +2

Name of the Vulnerable Software and Affected Versions: Smartphones affected versions not specified Description: The issue concerns an Unauthorized file access vulnerability. Successful exploitation of this vulnerability may affect service confidentiality. Recommendations: At the moment, there is ...

CVE-2021-37133: Undefined Security Weakness

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-44717

Go before 1.16.12 and 1.17.x before 1.17.5 on UNIX allows write operations to an unintended file or unintended network connection as a consequence of erroneous closing of file descriptor 0 after file-descriptor exhaustion...

Data Source Name Injection

Description TiDB Importer uses Go MySQL Driver for connecting to MySQL servers. This driver utilizes Data Source Name DSN strings for describing database connections with the following format: username:password@protocoladdress/dbname?param=value The driver has a built-in protection against LOCAL...

CVE-2021-20874

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain...

CVE-2021-20874: Incorrect Permission Assignment for Critical Resource

Incorrect permission assignment for critical resource vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlier, and GroupSession ZION ver5.1.1 and earlier allows a remote unauthenticated attacker to access arbitrary files on the server and obtain...

CVE-2017-13910: Undefined Security Weakness

An access issue was addressed with additional sandbox restrictions on applications. This issue is fixed in macOS High Sierra 10.13. An application may be able to access restricted files...

Fresenius Kabi Agilia Connect Infusion System 信息泄露漏洞

Fresenius Kabi Agilia Connect Infusion System is an infusion system from the German company Fresenius Kabi.The Fresenius Kabi Agilia Connect Infusion System is vulnerable to information disclosure, which could be exploited by attackers to identify and access files on the server...

The vulnerability of the `squashfs_opendir` function in the `unsquash-2.c` component of the Squashfs-Tools tooling suite relates to improper definition of symbolic links before accessing files. This vulnerability allows an attacker to compromise data integrity and cause service failures.

The vulnerability of the squashfs-opendir function in the unsquash-2.c component of the Squashfs-Tools suite for creating and extracting file systems is related to an incorrect definition of symbolic links before accessing files. Exploiting this vulnerability allows a remote attacker to compromis...

JVN#79798166: Multiple vulnerabilities in GroupSession

GroupSession provided by Japan Total System Co.,Ltd. contains multiple vulnerabilities listed below. Incorrect Permission Assignment for Critical Resource CWE-732 - CVE-2021-20874 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N| Base Score: 7.5 CVSS v2|...

The vulnerability of the FilePath#reading(FileVisitor) component in the Jenkins automation server allows a malicious actor to have unlimited access to read files by using certain operations.

The vulnerability of the FilePathreadingFileVisitor component in Jenkins automation servers is related to the absence of authentication procedures. Exploiting this vulnerability allows a malicious actor to gain unlimited access to files by performing certain operations...

UpdateStar HD-Network Real-time Monitoring System Path Traversal Vulnerability

UpdateStar HD-Network Real-time Monitoring System is a high-definition network real-time monitoring system from UpdateStar, a German company. updateStar HD-Network Real-time Monitoring System in version 2.0 is vulnerable to path traversal vulnerability, which stems from the failure of a network...

Gradio path traversal vulnerability

Gradio is an open source Python library that is a way to demonstrate machine learning models through a friendly web interface. versions of Gradio prior to 2.5.0 have a path traversal vulnerability that can be exploited by an attacker to access any file on the host...

Default credentials

KNIME Server before 4.12.6 and 4.13.x before 4.13.4 when installed in unattended mode keeps the administrator's password in a file without appropriate file access controls, allowing all local users to read its content...

Path Traversal

gradio is vulnerable to Path Traversal. An attacker who receives a gradio link can access files on the host machine if know the file names or file paths since the library does not properly restrict the file paths...

The vulnerability of the agent-to-controller subsystem of the Jenkins automation server allows a attacker to compromise the confidentiality and integrity of the protected information.

The vulnerability of the agent-to-controller subsystem of the Jenkins automation server is related to an incorrect definition of the link before accessing the file. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality and integrity of the protected information...