21 matches found
EUVD-2026-91071
On-Chip Debug Interface vulnerability in Johnson Controls Neo Series MVP2 allows Collect Data from Common Resource Locations. This issue affects Neo Series MVP2: before 3.3b63...
CVE-2026-34493
On-Chip Debug Interface vulnerability in Johnson Controls EasyIO FS32 allows Collect Data from Common Resource Locations. This issue affects EasyIO FS32: before 3.3b63...
CVE-2026-64892
The Johnson Controls Easy IO Neo (specifically EC and CW Controllers ) is vulnerable to an Exposure of Sensitive Information vulnerability affecting versions before 3.3b63 . The flaw allows an attacker to collect data from common resource locations, potentially providing access to sensitive infor...
CVE-2026-64892
Exposure of Sensitive Information vulnerability in Johnson Controls Easy IO Neo allows Collect Data from Common Resource Locations. This issue affects Easy IO Neo: before 3.3b63...
PT-2026-104051
Name of the Vulnerable Software and Affected Versions Johnson Controls Easy IO Neo versions prior to 3.3b63 Description An exposure of sensitive information allows the collection of data from common resource locations. Attackers have been observed exploiting this issue in controllers to access...
The vulnerability of the Key Guard component in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Key Guard component in Windows operating systems is related to synchronization errors when using a common resource. Exploiting this vulnerability can allow an attacker to increase their privileges...
EUVD-2026-42019
Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...
CVE-2026-8377 Improper Authorization in Armiya Technologies' Access Control System
Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...
PT-2026-56165
Missing Authorization vulnerability in Armiya Information Technologies Ltd. Co. Access Control System GKS allows Collect Data from Common Resource Locations. This issue affects Access Control System GKS: before Version 2...
CVE-2025-41053
A vulnerability has been discovered in appRain CMF version 4.0.5, consisting of a stored authenticated XSS due to a lack of proper validation of user input, through the 'dataAddonlayouts' and 'dataAddonlayoutsexcept' parameters in /apprain/developer/addons/update/commonresource...
CVE-2024-7107
Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations. This issue affects CyberMath: before CYBM.240816253...
CVE-2024-13241 Open Social - Moderately critical - Information Disclosure - SA-CONTRIB-2024-005
Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5...
CVE-2024-13240: Improper Access Control
Improper Access Control vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.05...
CVE-2024-13241: Improper Authorization
Improper Authorization vulnerability in Drupal Open Social allows Collect Data from Common Resource Locations.This issue affects Open Social: from 0.0.0 before 12.0.5...
CVE-2024-7107
Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations. This issue affects CyberMath: before CYBM.240816253...
CVE-2024-7107
CVE-2024-7107 affects National Keep Cyber Security Services’ CyberMath. A directory traversal/file-access vulnerability allows external parties to collect data from common resource locations in CyberMath versions before CYBM.240816253. The issue is described across multiple sources (Red Hat, CVE ...
CVE-2024-7107: Files or Directories Accessible to External Parties
Files or Directories Accessible to External Parties vulnerability in National Keep Cyber Security Services CyberMath allows Collect Data from Common Resource Locations. This issue affects CyberMath: before CYBM.240816253...
CVE-2024-6878
Files or Directories Accessible to External Parties vulnerability in Eliz Software Panel allows Collect Data from Common Resource Locations. This issue affects Panel: before v2.3.24...
