Path traversal

Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

Path traversal

UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files...

CVE-2022-39037

CVE-2022-39037 affects Flowring Technology’s Agentflow BPM, where the file download feature suffers a path traversal flaw. An unauthenticated remote attacker can rely on this to bypass authentication and download arbitrary system files. The vulnerability is documented across multiple sources (NVD...

CVE-2022-39037 FLOWRING Agentflow BPM - Path Traversal

Agentflow BPM file download function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

CVE-2022-38120

Public documents confirm CVE-2022-38120 is a path-traversal vulnerability in POWERCOM UPSMON PRO that allows a remote attacker with general user privileges to read arbitrary system files and bypass authentication. Metasploit/auxiliary module upsmon_traversal exploits this path traversal to retrie...

CVE-2022-38120 POWERCOM CO., LTD. UPSMON PRO - Path Traversal

UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files...

CVE-2022-38120 POWERCOM CO., LTD. UPSMON PRO - Path Traversal

UPSMON PRO’s has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication and access arbitrary system files...

Flowring Technology Agentflow BPM 路径遍历漏洞

Flowring Technology Agentflow BPM is an enterprise process management system from Flowring Technology, a Chinese company. A path traversal vulnerability exists in Flowring Technology Agentflow BPM, which arises from a file download feature that allows an unauthenticated, remote attacker to bypass...

CVE-2022-44557

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality...

Security feature bypass

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality...

CVE-2022-44557

The SmartTrimProcessEvent module has a vulnerability of obtaining the read and write permissions on arbitrary system files. Successful exploitation of this vulnerability may affect data confidentiality...

PT-2022-27242 · Unknown · Smarttrimprocessevent

Name of the Vulnerable Software and Affected Versions: SmartTrimProcessEvent module affected versions not specified Description: The issue concerns the SmartTrimProcessEvent module, which has a vulnerability that allows obtaining read and write permissions on arbitrary system files. This could...

Huawei HarmonyOS 安全漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. A security vulnerability exists in Huawei HarmonyOS. An attacker could exploit the vulnerability to gain read and write access to arbitrary system files,...

CVE-2022-38661 HCL Workload Automation is affected by a vulnerability in Jlog component of the Master Domain Manager

HCL Workload Automation could allow a local user to overwrite key system files which would cause the system to crash...

Authorization

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to bypass authorization and access system files. This vulnerability is due to improper access control in the web-based management interface of an affected...

Cisco Identity Services Engine Insufficient Access Control Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to bypass authorization and access system files. This vulnerability is due to improper access control in the web-based management interface of an affected...

PT-2022-5524 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: The issue is related to insufficient access control in the web-based management interface of Cisco Identity Services Engine ISE, allowing a remote attacker to...

CVE-2022-39023

U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file...

PT-2022-24679 · U-Office · U-Office

Name of the Vulnerable Software and Affected Versions: U-Office affected versions not specified Description: The U-Office Force Download function contains a path traversal issue. This allows a remote attacker with general user privileges to exploit the issue and download arbitrary system files...

e-Excellence U-Office Force 路径遍历漏洞

e-Excellence U-Office Force is an e-Office platform from China's First Class Technology e-Excellence. U-Office Force suffers from a path traversal vulnerability, which arises from its download feature that allows a remote attacker with common privileges to traverse the path and download arbitrary...