2968 matches found
CVE-2021-25362
An improper permission management in CertInstaller prior to SMR APR-2021 Release 1 allows untrusted applications to delete certain local files...
Samsung Notes path traversal vulnerability (CNVD-2021-28775)
Samsung Notes is an application from Samsung, a South Korean company. It is used to provide a recording function. A path traversal vulnerability exists in Samsung Notes prior to version 4.2.00.22, which can be exploited by an attacker to gain unauthorized access to local files...
CVE-2021-25367
Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission...
Path traversal
Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission...
CVE-2021-25367
Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission...
CVE-2021-21343
XStream is a Java library to serialize objects to XML and back again. In XStream before version 1.4.16, there is a vulnerability where the processed stream at unmarshalling time contains type information to recreate the formerly written objects. XStream creates therefore new instances based on...
CVE-2020-4882
IBM Planning Analytics 2.0 could be vulnerable to a Server-Side Request Forgery SSRF attack by constucting URLs from user-controlled data . This could enable attackers to make arbitrary requests to the internal network or to the local file system. IBM X-Force ID: 190852...
IBM Planning Analytics 代码问题漏洞
IBM Planning Analytics is a planning, budgeting, forecasting and analytics solution. A server-side request forgery vulnerability exists in IBM Planning Analytics 2.0. An attacker could exploit this vulnerability by making arbitrary requests to the internal network or local file system from a...
Grav Path Traversal Vulnerability
Grav is a flat file CMS that uses Markdown files for content management. A path traversal vulnerability exists in the backup feature of Grav 1.7.0-rc.17 and earlier versions. An attacker can exploit this vulnerability to read arbitrary local files on the underlying server...
Path traversal
The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting a path-traversal technique. This vulnerability can also be exploited by an unauthenticated attacker due to a lack of CSRF protection...
Grav 路径遍历漏洞
Grav is a flat file CMS that uses Markdown files for content management. A path traversal vulnerability exists in the backup feature of Grav 1.7.0-rc.17 and earlier versions. An attacker can exploit this vulnerability to read arbitrary local files on the underlying server...
CVE-2021-3310
Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...
Samsung mobile devices access control error vulnerability
Samsung mobile devices is a cell phone application from Samsung Samsung, South Korea. It provides a communication function. An access control error vulnerability exists in Samsung mobile devices SMR prior to Mar-2021 Release 1. The vulnerability stems from an access control error in the clipboard...
CVE-2021-25337
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files...
CVE-2021-25337
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files...
CVE-2021-25337
CVE-2021-25337 is an Samsung-only vulnerability in the clipboard content provider (system_server) that allowed untrusted apps to read/write arbitrary files via improper access control before SMR Mar-2021 Release 1. The issue stems from missing access checks in the SemClipboardProvider.insert path...
CVE-2021-25337
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files...
CVE-2021-25337
Improper access control in clipboard service in Samsung mobile devices prior to SMR Mar-2021 Release 1 allows untrusted applications to read or write certain local files. Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value: 0Assessed Attacker Value: 0...
SAMSUNG Mobile devices 安全漏洞
Samsung mobile devices is a cell phone application from Samsung Samsung, South Korea. It provides a communication function. An access control error vulnerability exists in Samsung mobile devices SMR prior to Mar-2021 Release 1. The vulnerability stems from an access control error in the clipboard...