52 matches found
Dolibarr Unauthenticated Contacts Database Theft
An issue in Dolibarr 16 before 16.0.5 allows unauthenticated attackers to perform a database dump and access a company's entire customer file, prospects, suppliers, and employee information if a contact file exists. id: CVE-2023-33568 info: name: Dolibarr Unauthenticated Contacts Database Theft...
CVE-2024-33352
CVEID ：CVE-2024-33352 Bluestacks 公告 ID ：待定 受影响产品及版本名称 ：BlueStacks for Windows（10.40.1000.502 之前的版本） 漏洞类型 ：CWE-552：外部方可访问的文件或目录 摘要 BlueStacks 是一款 Android 模拟器，它在虚拟机中运行客户机 Android 系统。由于 BlueStacks 将虚拟机配置文件存储在全局可写目录中，并在不同的操作系统用户之间共享这些文件，非特权用户有可能对镜像植入后门，从而获得特权用户的代码执行能力。 描述 BlueStacks 配置全局存储在 ProgramDa...
CVE-2023-45594
A CWE-552 “Files or Directories Accessible to External Parties” vulnerability in the embedded Chromium browser allows a physical attacker to arbitrarily download/upload files to/from the file system, with unspecified impacts to the confidentiality, integrity, and availability of the device. This...
CVE-2024-2052
CWE-552: Files or Directories Accessible to External Parties vulnerability exists that could allow unauthenticated files and logs exfiltration and download of files when an attacker modifies the URL to download to a different location...
EUVD-2024-37321
Malicious code in bioql PyPI...
EUVD-2021-9904
Malicious code in bioql PyPI...
EUVD-2023-51723
Malicious code in bioql PyPI...
EUVD-2023-49886
Malicious code in bioql PyPI...
EUVD-2023-34017
Malicious code in bioql PyPI...
EUVD-2024-39144
Malicious code in bioql PyPI...
CVE-2023-47612
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Telit Cinterion BGS5, Telit Cinterion EHS5/6/8, Telit Cinterion PDS5/6/8, Telit Cinterion ELS61/81, Telit Cinterion PLS62 that could allow an attacker with physical access to the target system to obtain a...
CVE-2021-22769
A CWE-552: Files or Directories Accessible to External Parties vulnerability exists in Easergy T300 with firmware V2.7.1 and older that could expose files or directory content when access from an attacker is not restricted or incorrectly restricted...
CVE-2025-2222
CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privilege escalation following man in the middle attack...
CVE-2025-2222
CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privilege escalation following man in the middle attack...
CVE-2025-2222
CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privilege escalation following man in the middle attack...
CVE-2025-2222
The CVE-2025-2222 entry relates to Schneider Electric ConneXium Network Manager. Affected component: the ConneXium Network Manager software; vulnerability arises from an externally accessible file or directory over HTTPS, enabling information disclosure and potential privilege escalation via a ma...
CVE-2025-2222
CWE-552: Files or Directories Accessible to External Parties vulnerability over https exists that could leak information and potential privilege escalation following man in the middle attack...
CVE-2024-41699
Priority – CWE-552: Files or Directories Accessible to External Parties...
CVE-2024-41699
Technical details about CVE-2024-41699 are not publicly available in the provided documents. No affected products, versions, or fixes are specified. Monitor for updates from authoritative sources.