Apple Shortcuts 安全漏洞

Apple Shortcuts for iOS is a suite of shortcut applications from Apple Inc. for the iOS platform. A security vulnerability exists in Apple Shortcuts, which originated when the application could allow Shortcuts to access restricted files. The following products and versions are affected: iPhone 6s...

MB CONNECT LINE mymbCONNECT24 and mbCONNECT24 Access Control Vulnerabilities

Mb Connect Line MB CONNECT LINE mymbCONNECT24 is an in-house remote maintenance solution for virtual environments from MB CONNECT LINE Mb Connect Line, Germany. An access control vulnerability exists in MB CONNECT LINE mymbCONNECT24 and mbCONNECT24, which can be exploited by remote attackers to...

CVE-2020-35570

An issue was discovered in MB connect line mymbCONNECT24, mbCONNECT24 and Helmholz myREX24 and myREX24.virtual through 2.11.2. An unauthenticated attacker is able to access files that should have been restricted via forceful browsing...

PT-2021-11801 · Helmholz +1 · Myrex24.Virtual +2

Name of the Vulnerable Software and Affected Versions: MB connect line mymbCONNECT24 versions through 2.11.2 mbCONNECT24 versions through 2.11.2 Helmholz myREX24 versions through 2.11.2 myREX24.virtual versions through 2.11.2 Description: An issue allows an unauthenticated attacker to access...

Path Traversal Vulnerability in Multiple Cisco Products

The Cisco RV160, among others, is a router from the U.S. company Cisco that is used in enterprise environments. A path traversal vulnerability exists in the Cisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers, which could be exploited by an unauthenticated, remote attacker t...

USN-4715-1 python-django vulnerability

Wang Baohua discovered that Django incorrectly extracted archive files. A remote attacker could possibly use this issue to extract files outside of their expected location...

CVE-2020-10006

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to access restricted files...

CVE-2020-10006

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to access restricted files...

Design/Logic Flaw

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to access restricted files...

CVE-2020-10006

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to access restricted files...

CVE-2020-10006: Undefined Security Weakness

This issue was addressed with improved entitlements. This issue is fixed in macOS Big Sur 11.0.1. A malicious application may be able to access restricted files...

PT-2020-11850 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.0.1 Description: A malicious application may be able to access restricted files due to this issue. The problem was addressed with improved entitlements. Recommendations: For versions prior to 11.0.1, update to macOS...

Silver Peak Unity Orchestrator Path Traversal Vulnerability (CNVD-2020-63950)

Silver Peak Systems Silver Peak Unity Orchestrator is Silver Peak Systems' software for network management across WAN environments. The software provides a centralized way to orchestrate the network and visualize and manage network status. A path traversal vulnerability exists in Silver Peak Unit...

CVE-2020-12146

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API...

CVE-2020-12146

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API...

Apple macOS Catalina Privilege Permission and Access Control Issues Vulnerability

Apple macOS Catalina is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Catalina versions prior to 10.15, which stems from a malicious application that may be able to access restricted files. No details of the vulnerability...

CVE-2020-12146: Improper Limitation of a Pathname to a Restricted Directory

In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the Orchestrator server using the/debugFiles REST API...

CVE-2019-8855

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access restricted files...

CVE-2019-8855

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access restricted files...

Authentication flaw

An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Catalina 10.15. A malicious application may be able to access restricted files...