766 matches found
GHSA-W34W-FVP3-68XM Yeswiki Path Traversal vulnerability allows arbitrary read of files
Summary The squelette parameter is vulnerable to path traversal attacks, enabling read access to arbitrary files on the server. The payload ../../../../../../etc/passwd was submitted in the squelette parameter. The requested file was returned in the application's response. Details File path...
CVE-2024-56187
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
Path Traversal (Arbitrary Read/Write) org.springframework:spring-webmvc Dependency in Jira Service Management Data Center and Server
This High severity org.springframework:spring-webmvc Dependency vulnerability was introduced in versions 5.12.0 Jira Service Management Data Center and Server. This org.springframework:spring-webmvc Dependency vulnerability, with a CVSS Score of 7.5 and a CVSS Vector of...
CVE-2024-56187
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-56187
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-56187
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
PT-2025-10611
Name of the Vulnerable Software and Affected Versions The product name cannot be determined. Description A logic error in the code of ppcfw deny sec dram access function in ppcfw.c could lead to a possible arbitrary read from TEE memory. This issue may result in local information disclosure,...
PUB-A-306032268
In ppcfwdenysecdramaccess of ppcfw.c, there is a possible arbitrary read from TEE memory due to a logic error in the code. This could lead to local information disclosure with System execution privileges needed. User interaction is not needed for exploitation...
CVE-2024-55410
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority...
PT-2025-3112
Name of the Vulnerable Software and Affected Versions SUNIX Multi I/O Card version 10.1.0.0 Description An issue in the snxpcamd.sys component allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. This enables attackers to manipulate the system, posing...
PT-2025-3111
Name of the Vulnerable Software and Affected Versions Asus GPU Tweak II Program Driver version 1.0.0.0 Description The issue in the 690b33e1-0462-4e84-9bea-c7552b45432a.sys component allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests. Recommendations...
CVE-2024-55411: Incorrect Permission Assignment for Critical Resource
An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...
CVE-2024-55411
The SUNIX Multi I/O Card version v10.1.0.0 contains a security vulnerability in the snxpcamd.sys component. This flaw allows an attacker to perform arbitrary read and write actions by supplying specially crafted IOCTL requests . This issue is associated with CWE-732 (Incorrect Permission Assignme...
CVE-2024-55411
An issue in the snxpcamd.sys component of SUNIX Multi I/O Card v10.1.0.0 allows attackers to perform arbitrary read and write actions via supplying crafted IOCTL requests...
ASUS System Analysis IO security vulnerabilities
ASUS System Analysis IO is a module in a diagnostic software from Asus China. A security vulnerability exists in ASUS System Analysis IO version 1.0.0, which stems from a problem with the AsusSAIO.sys component that allows an attacker to perform arbitrary read and write operations by supplying a...
PT-2025-3110 · Asus · Asus System Analysis Io
Name of the Vulnerable Software and Affected Versions: ASUS System Analysis IO version 1.0.0 Description: The issue is related to improper access control in the AsusSAIO.sys driver, which may allow the misuse of software functionality when crafted IOCTL requests are supplied. This can lead to...
CVE-2024-55408
In CVE-2024-55408, the affected component is the Asus System Analysis IO driver (AsusSAIO.sys). The root cause is improper access control in the driver, which may allow misuse of software functionality when crafted IOCTL requests are supplied. The documented impact is the ability to perform arbit...
Adobe ColdFusion path traversal vulnerability
Adobe ColdFusion is the United States Odo than Adobe company's set of rapid application development platform. The platform includes an integrated development environment and scripting language. Adobe ColdFusion suffers from a path traversal vulnerability, which arises when the program fails to...
