262 matches found
Multiple Apple Product Input Validation Vulnerabilities (CNVD-2020-01910)
Apple iOS is an operating system developed for mobile devices.Apple tvOS is a smart TV operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system.Apple watchOS is a smart watch operating system.Apple iOS is a smart TV operating system.Apple...
SilverStripe Information Disclosure Vulnerability
SilverStripe is New Zealand SilverStripe company's set of open source programming framework and content management system CMS. The system has support for multiple languages , cross-platform and other features . SilverStripe 4.3.3 and earlier versions of a security vulnerability , the vulnerabilit...
CVE-2019-9440
In AOSP Email, there is a possible information disclosure due to a confused deputy. This could lead to local disclosure of the Email app's protected files with User execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-37637796...
CVE-2019-12245
SilverStripe through 4.3.3 has incorrect access control for protected files uploaded via Upload::loadIntoFile. An attacker may be able to guess a filename in silverstripe/assets via the AssetControlExtension...
CVE-2019-12245
Summary: SilverStripe up to 4.3.3 is affected by an access-control weakness in protected files uploaded via Upload::loadIntoFile(). An attacker may guess a filename in silverstripe/assets using the AssetControlExtension, potentially exposing protected assets. Remediation details are not specified...
CVE-2019-16409: Secureassets and versionedfiles modules can expose versions of protected files
More info at https://www.silverstripe.org/download/security-releases/cve-2019-16409/...
CVE-2019-10990
Red Lion Controls Crimson, version 3.0 and prior and version 3.1 prior to release 3112.00, uses a hard-coded password to encrypt protected files in transit and at rest, which may allow an attacker to access configuration files...
The vulnerability of the Web interface of the Cisco Data Center Network Manager system allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Web interface of the Cisco Data Center Network Manager DCNM system is related to errors in permission processing. Exploiting this vulnerability could allow a malicious actor to gain access to the protected files of the vulnerable device remotely...
Information Disclosure
Firefox is vulnerable to information disclosure attacks. A remote user could bypass same-origin restrictions in the PDF viewer to view ostensibly protected PDF files...
CVE-2018-4007
An exploitable privilege escalation vulnerability exists in the Shimo VPN 4.1.5.1 helper service in the deleteConfig functionality. The program is able to delete any protected file on the system. An attacker would need local access to the machine to successfully exploit the bug...
CVE-2017-7761
Summary: CVE-2017-7761 affects Firefox on Windows (Firefox ESR < 52.2 and Firefox
Microsoft Office: Protect document metadata for password protected files
This test checks the setting for policy OpenVAS Vulnerability Test $Id: office2013protectpasswdprotectedfilesmetadata.nasl 11843 2018-10-11 14:33:21Z emoss $ Check value for Protect document metadata for password protected files Authors: Emanuel Moss Copyright: Copyright c 2018 Greenbone Networks...
Appserver Directory Traversal Vulnerability
Appserver is a multi-threaded application server written in PHP. A directory traversal vulnerability exists in the Web request/response interface in versions of Appserver prior to 1.0.3. A remote attacker can leverage a specially crafted URL in the '...' in a specially crafted URL to read...
Microsoft Windows Elevation of Privilege (MS16-111: CVE-2016-3373)
An elevation of privilege vulnerability exists in Microsoft Windows. A malicious user can bypass a security check in Windows to read and write registry hive files under a hidden registry hive which could enable an elevation of privilege. Successful exploitation could allow an attacker to run...
Apple iOS Sensitive File Access Vulnerability
Apple iOS is the latest operating system that runs on Apple's iPhone and iPod touch devices. Apple iOS suffers from a security vulnerability that allows malicious applications to provide special afc commands that utilize symbolic links to access protected portions of the file system...
Deserialization of untrusted data
SpotlightIndex in Apple OS X before 10.10.2 does not properly perform deserialization during access to a permission cache, which allows local users to read search results associated with other users' protected files via a Spotlight query...
Apple TV and iOS AFC Symbolic Link Vulnerability
Apple iOS is the latest operating system for Apple's iPhone and iPod touch devices. Apple TV is Apple's way of allowing photos, videos and music from PCs and iPods to be transmitted wirelessly to a TV in high definition. A symbolic link vulnerability exists in the Apple TV and iOS AFC commands,...
CUPS 1.7.x < 1.7.4 'get_file' Function Symlink Handling Info Disclosure
According to its banner, the version of CUPS installed on the remote host is 1.7.x prior to 1.7.4. It is, therefore, potentially affected by an information disclosure vulnerability. A flaw exists in the 'getfile' function within the file 'scheduler/client.c' regarding the handling of symlinks. Th...
LiteWeb Server 2.5 Authentication Bypass Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13850/info LiteWeb Server is prone to a vulnerability that may let remote attackers bypass authentication. The specific issue is inadequate sanitization of user-supplied requests. In particular, there is an error in the...
