Content Credentials SDK Path Traversal

The vulnerability of the Content Credentials SDK libraries is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260818-73-0022

A vulnerability in Mariadb 11.4 exists due to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

TZInfo Path Traversal DoS

The vulnerability of the TZInfo time zone database is related to deficiencies in path name limitation for accessing the catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

CVE-2026-50226

Fixed AES-128-CBC keys inside the AcerConnect OTA application let attackers forge authorization credentials for arbitrary IMEI numbers. This allows unauthorized actors to list catalog items and extract protected binaries from pre-signed cloud links...

CVE-2026-50226

CVE-2026-50226 affects the AcerConnect OTA application. The issue arises from fixed AES-128-CBC keys inside the app, allowing attackers to forge authorization credentials for arbitrary IMEI numbers. This enables unauthorized actors to list catalog items and extract protected binaries from pre-sig...

FortiSOAR Path Traversal Data Compromise

The vulnerability of the software for coordinating the operation of cybersecurity systems and for managing incident responses in real-time with Fortinet FortiSOAR is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to...

ColdFusion Path Traversal

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

Access Control Service Privilege Insecure

The vulnerability of the access control service for remote catalogs and the SSSD authentication mechanism are related to insecure management of privileges. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data, compromise its integrity, and...

AndSoft e-TMS Path Traversal

The vulnerability of the AndSoft e-TMS transportation management software is related to the use of unreliable cryptographic algorithms. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

EcoStruxure Power Monitoring Expert Path Traversal

The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

ABC Notation Plugin Path Traversal

The vulnerability of the ABC Notation plugin in the WordPress content management system is related to errors in processing the relative path to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

QAnything AI Path Traversal

The vulnerability of the QAnything AI-based question-answering system is related to an incorrect restriction on the name of the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to read arbitrary files or execute arbitrary code remotely...

Description of the security update for Project 2016: December 10, 2024 (KB5002652)

None None...

Pandora FMS Path Traversal

The vulnerability of the Pandora FMS system for monitoring and managing IT environments stems from incorrect restrictions on the path name used to access the restricted catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the system and execute arbitrary...

Photos storage system Temporary Catalog Access

The vulnerability of Photos storage in operating systems such as tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker to gain access to photos stored in the temporary catalog...

access control service disclosure confidential information

The vulnerability of the access control service for remote catalogs and the authentication mechanism of sssd is related to the disclosure of information when an unauthorized user is brought back to the sssd’s home directory, allowing access to the file system. Exploiting this vulnerability can...

access control service disclosure confidential data

The vulnerability of the access control service for remote catalogs and the authentication mechanism of sssd involve revealing information that allows reading of sudo rules, which are accessible to any user. Exploiting this vulnerability could enable a malicious individual to gain access to...

Spring Cloud Config Path Traversal

The vulnerability of the Spring Cloud Config server exists due to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to expose the protected information using a specially created URL address...

Privilege escalation

A Improper Privilege Management vulnerability in SUSE Rancher allows write access to the Catalog for any user when restricted-admin role is enabled. This issue affects: SUSE Rancher Rancher versions prior to 2.5.13; Rancher versions prior to 2.6.4...

IIoT Monitor Platform Access Beyond Catalog

The vulnerability of the IIoT Monitor platform lies in the lack of filtering for specific symbols. Exploiting this vulnerability could allow a malicious actor to access data beyond the limited access scope of the catalog...