CVE-2024-48864

The CVE-2024-48864 entry affects QNAP File Station 5. Prior to version 5.5.6.4741, a file or directory became externally accessible, enabling remote read/write of files/directories. The vulnerability is resolved in File Station 5, version 5.5.6.4741 and later. Public references show CVSS metrics ...

CVE-2025-23421 Qardio iOS and Android applications Files or Directories Accessible to External Parties

An attacker could obtain firmware files and reverse engineer their intended use leading to loss of confidentiality and integrity of the hardware devices enabled by the Qardio iOS and Android applications...

CVE-2022-22264

Improper sanitization of incoming intent in Dressroom prior to SMR Jan-2022 Release 1 allows local attackers to read and write arbitrary files without permission...

CVE-2024-12313

The Compare Products for WooCommerce plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 3.2.1 via deserialization of untrusted input from the 'woocomparelist' cookie. This makes it possible for unauthenticated attackers to inject a PHP Object. No know...

Amazon Linux 2022 : containerd, containerd-stress (ALAS2022-2022-032)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-032 advisory. A bug was found in containerd where containers launched through containerd's CRI implementation with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and...

Kashipara E-learning Management System 安全漏洞

Kashipara E-learning Management System is a learning management system from Kashipara. A security vulnerability exists in Kashipara E-learning Management System v1.0. An attacker can exploit the vulnerability to access sensitive files and directories via /admin/uploads...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504 grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504 grub2 allows bypassing TPM-bound disk encryption on SL(E)M encrypted Images

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-49504

grub2 allowed attackers with access to the grub shell to access files on the encrypted disks...

CVE-2024-43387 Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAILRELAYPASSWORD in mGuard devices...

CVE-2024-43387 Phoenix Contact: Access files due to improper neutralization of special elements in MGUARD devices

A low privileged remote attacker can read and write files as root due to improper neutralization of special elements in the variable EMAILRELAYPASSWORD in mGuard devices...

CVE-2024-34654

Samsung My Files prior to SMR Sep-2024 Release 1 is affected by an improper export of an Android application component, allowing local attackers to access files with My Files’ privilege. The issue arises from component export that grants access beyond intended boundaries, enabling potential expos...

CraftOS-PC 2 安全漏洞

CraftOS-PC 2 is a fast, modern, feature-rich ComputerCraft simulator written in C++ by the individual developer JackMacWindows. A security vulnerability exists in CraftOS-PC 2 versions prior to 2.8.3, which stems from the fact that a user can obfuscate ... bypassing an internal check that prevent...

Splunk Enterprise Path Traversal Vulnerability

Splunk is a suite of data collection and analysis software from Splunk, Inc. in the United States. The software is primarily used to collect, index and analyze and the data it generates, including data generated by all IT systems and infrastructures physical, virtual machines and cloud. Splunk...

Hitachi XMC20 Security Vulnerability

Hitachi XMC20 is a multi-service remote communication network element from Hitachi, Ltd Hitachi, Japan. A security vulnerability exists in Hitachi XMC20, which originates from an attacker being able to traverse the file system to access otherwise inaccessible files or directories...

PT-2024-12990 · Motorola · Motorola Device Help

Name of the Vulnerable Software and Affected Versions: Motorola Device Help Genie application affected versions not specified Description: A PendingIntent hijacking issue in the Motorola Device Help Genie application could allow local attackers to access files or interact with non-exported softwa...

The vulnerability of the Pulsar Functions Worker module on the cloud platform for distributed messaging and Apache Pulsar streaming services allows a attacker to cause a service failure.

The vulnerability of the Pulsar Functions Worker module on the cloud platform for distributed messaging and Apache Pulsar streaming involves the use of files and directories accessible from external parties. Exploiting this vulnerability could allow a malicious actor to cause service failures...

undertow: directory traversal vulnerability

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

DEBIAN-CVE-2022-22942

The vmwgfx driver contains a local privilege escalation vulnerability that allows unprivileged users to gain access to files opened by other processes on the system through a dangling 'file' pointer...