The vulnerability of the server-based corporate software for project monitoring and management, RoboHelp Server, arises due to an incorrect path limitation to the restricted access catalog. This allows attackers to read arbitrary files.

The vulnerability of server-based corporate software for project monitoring and management with RoboHelp Server exists due to an incorrect limitation on the path to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially...

CVE-2021-34771

A vulnerability in the Cisco IOS XR Software CLI could allow an authenticated, local attacker to view more information than their privileges allow. This vulnerability is due to insufficient application of restrictions during the execution of a specific command. An attacker could exploit this...

PT-2021-3925

Name of the Vulnerable Software and Affected Versions Microsoft Windows affected versions not specified Description Remote code execution is possible in MSHTML, the browser rendering engine used by Microsoft Internet Explorer and hosted within Microsoft Office documents. The issue stems from...

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium arises from incorrect restrictions on path names in the restricted access catalog. This allows unauthorized access by intruders to protected information.

The vulnerability of microprogrammed software in Schneider Electric’s programmable logic controllers such as Modicon M340, Modicon Quantum, and Modicon Premium stems from incorrect restrictions on the path name in the restricted access catalog. Exploiting this vulnerability could allow an attacke...

PT-2021-4449 · D Link · Dsr-500N

Name of the Vulnerable Software and Affected Versions: D-Link DSR-500N version 1.02 D-Link DSR-500N versions prior to 2.12/2 Description: The issue is related to hard-coded credentials for undocumented user accounts in the '/etc/passwd' file. If an attacker recovers the cleartext password of the...

PT-2021-3900 · Microsoft · Windows

Name of the Vulnerable Software and Affected Versions: Windows versions prior to the fixed version Description: The issue is related to the Windows User Profile Service and is associated with insufficient access restrictions. It allows an attacker to elevate their privileges. The vulnerability ca...

多款Netgear产品授权问题漏洞

Netgear WNR3500L and others are products of Netgear, Inc.WNR3500L is a wireless router.WN2500RP is a wireless network signal extender.NETGEAR is a router. An authorization issue vulnerability exists in multiple NETGEAR devices. the vulnerability stems from the product not properly restricting...

CVE-2021-38205

drivers/net/ethernet/xilinx/xilinxemaclite.c in the Linux kernel before 5.13.3 makes it easier for attackers to defeat an ASLR protection mechanism because it prints a kernel pointer i.e., the real IOMEM pointer...

User Rights Access Manager <= 1.0.5 - Access Restriction Bypass

The plugin does not properly restrict access to pages, allowing admin users with restricted access done by the plugin to still access the related pages. The issue is the same technique than https://blog.nintechnet.com/vulnerabilities-fixed-in-wordpress-controlled-admin-access-plugin/ PoC The PoC...

CVE-2021-32756

ManageIQ is an open-source management platform. In versions prior to jansa-4, kasparov-2, and lasker-1, there is a flaw in the MiqExpression module of ManageIQ where a low privilege user could enter a crafted Ruby string which would be evaluated. Successful exploitation will allow an attacker to...

The vulnerability of the AutoBuild service on the AVEVA System Platform allows a malicious actor to execute arbitrary code with system privileges.

The vulnerability of the AutoBuild service on the AVEVA System Platform is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary commands with system privileges...

The vulnerability of the microprogrammed software for WAGO Series PFC200 programmable logic controllers arises from incorrect restrictions on the path name in the restricted access catalog. This allows an intruder to gain unauthorized access to protected information.

The vulnerability of the microprogrammed software in WAGO Series PFC200 programmable logic controllers is related to incorrect restrictions on the path name in the restricted access catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...

SUSE: Security Advisory (SUSE-SU-2021:1977-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mail.ru: Unauthorized Access To Admin panel

Access to static files of playerone.ru admin web interface was not sufficiently restricted. There was no possibility to access admin functions. Simple Bypass: Try access playerone.ru/admin/users/ 403 : host playerone.ru 127.0.0.1 Try again 127.0.0.1/admin/users 200 OK :...

The vulnerability of the IOx software platform for Cisco IOS XE and Cisco IOS operating systems, as well as the Cisco IC3000 Industrial Compute Gateway hardware security solution, arises from incorrect restrictions on path names in the restricted access directory. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the IOx software platform for Cisco IOS XE and Cisco IOS operating systems, as well as the Cisco IC3000 Industrial Compute Gateway hardware security solution, is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this...

PT-2021-18200 · Gitjacker · Gitjacker

Name of the Vulnerable Software and Affected Versions: gitjacker versions prior to 0.1.0 Description: The issue allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal. This enables attackers to potentially gain control over the system...

CVE-2021-22186

An authorization issue in GitLab CE/EE version 9.4 and up allowed a group maintainer to modify group CI/CD variables which should be restricted to group owners...

The vulnerability of the REST API interface of the Cisco Data Center Network Manager system allows a attacker to compromise the integrity and confidentiality of data.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker to compromise the integrity and confidentiality of data...

SAP AS ABAP and SAP S4 HANA Improper Authentication Vulnerabilities

SAP Netweaver is a service-oriented, integrated application platform from SAP, which provides a development and runtime environment for SAP applications. The platform mainly provides development and operation environment for SAP applications.ABAP is an application server running in NetWeaver and...

SAP AS ABAP 和 SAP S4 HANA 安全漏洞

SAP Netweaver is a service-oriented, integrated application platform from SAP, which provides a development and runtime environment for SAP applications. The platform mainly provides development and operation environment for SAP applications.ABAP is an application server running in NetWeaver and...