Path Traversal vulnerability in Kubevirt

...

CVE-2022-36875

Improper restriction of broadcasting Intent in SaWebViewRelayActivity of?Waterplugin prior to version 2.2.11.22081151 allows attacker to access the file without permission...

CVE-2022-36869

Improper access control vulnerability in ContactsDumpActivity of?Contacts Provider prior to version 12.7.59 allows attacker to access the file without permission...

Design/Logic Flaw

Pending Intent hijacking vulnerability in NotiCenterUtils in Samsung Pay prior to version 5.0.63 for KR and 5.1.47 for Global allows attackers to access files without permission via implicit Intent...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung, including cell phones, tablets, and more. A security vulnerability exists in SAMSUNG Mobile devices Charm versions prior to 1.2.3, which stems from a PendingIntent hijacking vulnerability in...

PT-2022-13984 · WordPress · Project Source Code Download

Name of the Vulnerable Software and Affected Versions: The Project Source Code Download WordPress plugin version 1.0.0 Description: The issue concerns the lack of protection for backup generation and download functionalities in the plugin, potentially allowing any site visitor to download the...

CVE-2022-2139

The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code...

CVE-2022-2139 Advantech iView

The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code...

Advantech iView 路径遍历漏洞

A directory traversal vulnerability exists in versions prior to Advantech iView 5.7.04.6469, which is caused by a network system or product that fails to properly filter resources or file paths. An attacker could use the vulnerability to access unauthorized files and execute arbitrary code...

Design/Logic Flaw

Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileged user to run a "repair" operation o...

Opencast < 10.6 Unauthorized File Access Vulnerability

Opencast is prone to a unauthorized file access vulnerability. Copyright C 2022 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

CVE-2022-22585

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files...

CVE-2022-22795 Signiant - Manager+Agents XML External Entity (XXE)

Signiant - Manager+Agents XML External Entity XXE - Extract internal files of the affected machine An attacker can read all the system files, the product is running with root on Linux systems and nt/authority on windows systems, which allows him to access and extract any file on the systems, such...

CVE-2022-22795

Signiant Manager+Agents is affected by an XML External Entity (XXE) vulnerability (CVE-2022-22795). The issue enables an attacker to read internal files on the compromised machine, with the product running as root on Linux and as NT/Authority on Windows, allowing access to sensitive files (e.g., ...

CVE-2021-39969

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-39969

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-37133

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

Design/Logic Flaw

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...

CVE-2021-39969

There is an Unauthorized file access vulnerability in Smartphones.Successful exploitation of this vulnerability may affect service confidentiality...