CVE-2025-55305: Improper Control of Generation of Code

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. In versions below 35.7.5, 36.0.0-alpha.1 through 36.8.0, 37.0.0-alpha.1 through 37.3.1 and 38.0.0-alpha.1 through 38.0.0-beta.6, ASAR Integrity Bypass via resource modification. This only impac...

ABB Multiple Catalog Traversal Vulnerability

ABB ASPECT-Enterprise is a scalable building energy management and control solution.ABB NEXUS Series is a monitoring and control management system.ABB MATRIX Series is an embedded IoT ASPECT control engine designed to provide flexible field control for medium to large field control applications. ...

CVE-2024-48850

Absolute File Traversal vulnerabilities in ASPECT allows access and modification of unintended resources. This issue affects ASPECT-Enterprise: through 3.08.03; NEXUS Series: through 3.08.03; MATRIX Series: through 3.08.03...

CVE-2024-45097

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45098

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-48850

CVE-2024-48850 describes an Absolute File Traversal in ABB ASPECT product line. Affected are ASPECT-Enterprise (through 3.08.03) , NEXUS Series (through 3.08.03) , and MATRIX Series (through 3.08.03) . The underlying issue allows access and modification of unintended resources via directory trave...

CVE-2024-38646 Notes Station 3

An incorrect permission assignment for critical resource vulnerability has been reported to affect Notes Station 3. If exploited, the vulnerability could allow local authenticated attackers who have gained administrator access to read or modify the resource. We have already fixed the vulnerabilit...

CVE-2024-45097

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45097

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45098

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45098

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45097

IBM Aspera Faspex 5.x versions 5.0.0–5.0.9 contain a security bypass vulnerability that can let an authenticated user bypass access restrictions and modify resources. Multiple connected sources (including IBM Security Bulletin F73E0EBA07F808CC311F1BEE8CD05E8006521D2DA613C5B0AF32FC69B8DD3F65) desc...

CVE-2024-45097 IBM Aspera Faspex bypass security

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45097 IBM Aspera Faspex bypass security

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45098 IBM Aspera Faspex bypass security

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45098 IBM Aspera Faspex bypass security

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45098

IBM Aspera Faspex 5.0.0–5.0.9 contains a security bypass that can allow a user to bypass intended access restrictions and modify resources. The issue is addressed in Faspex 5.0.10. Affected product: IBM Aspera Faspex (versions 5.0.0–5.0.9). Root cause indicated: bypass of access controls leading ...

CVE-2024-45098: Trusting HTTP Permission Methods on the Server Side

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

CVE-2024-45097: Trusting HTTP Permission Methods on the Server Side

IBM Aspera Faspex 5.0.0 through 5.0.9 could allow a user to bypass intended access restrictions and conduct resource modification...

IBM Aspera 安全漏洞

IBM Aspera is a set of fast file transfer and streaming solutions built on the IBM FASP protocol from International Business Machines IBM. A security bypass vulnerability exists in IBM Aspera versions 5.0.0 through 5.0.9, which can be exploited by an attacker to bypass intended access restriction...