10502 matches found
CVE-2020-23038: Improper Limitation of a Pathname to a Restricted Directory
Swift File Transfer Mobile v1.1.2 and below was discovered to contain an information disclosure vulnerability in the path parameter. This vulnerability is exploited via an error caused by including non-existent path environment variables...
PT-2021-23615
Name of the Vulnerable Software and Affected Versions Product affected versions not specified Description The issue allows all users access to read global variables, resulting in the disclosure of peer username and password. Recommendations At the moment, there is no information about a newer...
PT-2021-10815
Name of the Vulnerable Software and Affected Versions Swift File Transfer Mobile versions 1.1.2 and below Description The issue is related to an information disclosure problem in the path parameter. It is triggered by an error that occurs when non-existent path environment variables are included...
Emerson WirelessHART Gateway command injection vulnerability
The Emerson WirelessHART Gateway is a wireless gateway from Emerson USA. A command injection vulnerability exists in Emerson WirelessHART Gateway that allows all users to access read global variables, and affected products are prone to disclosing peer usernames and passwords...
CVE-2021-30358
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent...
CVE-2021-30358
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent...
CVE-2021-30358
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent...
Design/Logic Flaw
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent...
CVE-2021-30358
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent...
CVE-2021-30358: Improper Neutralization of Special Elements used in an OS Command
Mobile Access Portal Native Applications who's path is defined by the administrator with environment variables may run applications from other locations by the Mobile Access Portal Agent...
PT-2021-18720
Name of the Vulnerable Software and Affected Versions Mobile Access Portal Native Applications affected versions not specified Description The issue concerns Mobile Access Portal Native Applications where the path is defined by the administrator using environment variables. In such cases, the...
GoAhead file upload vulnerability
GoAhead is an open source small embedded web server from Embedthis Software, U.S. GoAhead is vulnerable to a file upload vulnerability that stems from incomplete filter processing in the file upload filter. An attacker could exploit this vulnerability to import untrusted environment variables int...
CVE-2021-42342
An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerable CGI scripts...
CVE-2021-42342
An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerable CGI scripts...
CVE-2021-42342
An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerable CGI scripts...
CVE-2021-42342
An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerable CGI scripts...
GoAhead code issues and vulnerabilities
GoAhead is an open source small embedded web server from Embedthis Software, U.S. GoAhead is vulnerable to a file upload vulnerability that stems from incomplete filter processing in the file upload filter. An attacker could exploit this vulnerability to import untrusted environment variables int...
PT-2021-23583
Name of the Vulnerable Software and Affected Versions GoAhead versions 4.x through 5.x before 5.1.5 GoAhead version 5.1.5 is not affected, so the range can be simplified to versions prior to 5.1.5. Description An issue was discovered in the file upload filter, where user form variables can be...
CVE-2021-42342: Unrestricted Upload of File with Dangerous Type
An issue was discovered in GoAhead 4.x and 5.x before 5.1.5. In the file upload filter, user form variables can be passed to CGI scripts without being prefixed with the CGI prefix. This permits tunneling untrusted environment variables into vulnerable CGI scripts...
