16930 matches found
CVE-2021-1807
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4. A local user may be able to write arbitrary files...
CVE-2021-1807
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4. A local user may be able to write arbitrary files...
Input validation
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4. A local user may be able to write arbitrary files...
CVE-2021-1807
A validation issue was addressed with improved input sanitization. This issue is fixed in iOS 14.5 and iPadOS 14.5, watchOS 7.4. A local user may be able to write arbitrary files...
Input validation
A malicious application may be able to overwrite arbitrary files. This issue is fixed in macOS Big Sur 11.4, Security Update 2021-004 Mojave. An issue with path validation logic for hardlinks was addressed with improved path sanitization...
Design/Logic Flaw
Nextcloud Richdocuments is an open source collaborative office suite. In affected versions the File Drop features "Upload Only" public link shares in Nextcloud can be bypassed using the Nextcloud Richdocuments app. An attacker was able to read arbitrary files in such a share. It is recommended th...
CVE-2020-7832
A vulnerability improper input validation in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.CVE-2020-7832...
Input validation
A vulnerabilityimproper input validation in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system...
CVE-2020-7865
A vulnerabilityimproper input validation in the ExECM CoreB2B solution allows an unauthenticated attacker to download and execute an arbitrary file via httpDownload function. A successful exploit could allow the attacker to hijack vulnerable system...
CVE-2020-7832
A vulnerability improper input validation in the DEXT5 Upload solution allows an unauthenticated attacker to download and execute an arbitrary file via AddUploadFile, SetSelectItem, DoOpenFile function.CVE-2020-7832...
Aruba Operating System Path Traversal Vulnerability
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, Inc. The vulnerability is caused by a lack of validation and filtering of parameters, which could be exploited by an authenticated attacke...
ExECM CoreB2B solution 输入验证错误漏洞
ExECM CoreB2B is provides a repeatable, proven People-Process-Technology model that scales IT teams and ensures operations stay in sync with B2B integration trends and requirements while improving business process optimization. A security vulnerability exists in the ExECM CoreB2B solution that...
Huawei HarmonyOS 路径遍历漏洞
Huawei HarmonyOS is an operating system from Huawei, China. A path traversal vulnerability exists in Huawei HarmonyOS, which stems from a component in the product that causes directory traversal. An attacker could exploit the vulnerability to cause the deletion of any file...
Huawei Smartphone 代码注入漏洞
Huawei Smartphone is a smartphone from Huawei, a Chinese company. Huawei Smartphone suffers from a code injection vulnerability. An attacker can exploit this vulnerability to delete arbitrary files via systemapp privileges...
Path Traversal
atlasboard is vulnerable to path traversal. Lack of secure path handling in the function renderWidgetResource allows an attacker to read arbitrary files...
OpenSIS 8.0 'modname' - Directory Traversal
Exploit Title: OpenSIS 8.0 'modname' - Directory/Path Traversal Date: 09-02-2021 Exploit Author: Eric Salario Vendor Homepage: http://www.os4ed.com/ Software Link: https://opensis.com/download Version: 8.0 Tested on: Windows, Linux CVE: CVE-2021-40651 The 'modname' parameter in the 'Modules.php' ...
Path traversal in atlasboard
The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability. PoC javascript const widget = require"atlasboard/lib/webapp/routes/widget"; // Mock req and res const req = ; const res = sendFile:...
GHSA-25PR-6PR6-68V7 Path traversal in atlasboard
The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerability. PoC javascript const widget = require"atlasboard/lib/webapp/routes/widget"; // Mock req and res const req = ; const res = sendFile:...
Directory traversal in Eclipse Mojarra
Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter...
Aruba Operating System路径遍历漏洞
Aruba Networks ArubaOS is an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, Inc. The vulnerability is caused by a lack of validation and filtering of parameters, which could be exploited by an authenticated attacke...