Pimcore 安全漏洞

Pimcore is Austria Pimcore company's set of open source for creating and managing Web applications Web content management platform. The platform integrates Web content management, e-commerce framework and product information management applications. A path traversal vulnerability exists in versio...

CVE-2023-2940: Improper Access Control

Inappropriate implementation in Downloads in Google Chrome prior to 114.0.5735.90 allowed an attacker who convinced a user to install a malicious extension to bypass file access restrictions via a crafted HTML page. Chromium security severity: Medium...

PT-2023-3761 · Google +2 · Google Chrome +2

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 114.0.5735.90 Description: The issue is related to an inappropriate implementation in the Downloads component, allowing an attacker to bypass file access restrictions. This can be achieved by convincing a user ...

PT-2023-12123 · Mercury · Mercury Mac1200R

Name of the Vulnerable Software and Affected Versions: Mercury MAC1200R devices affected versions not specified Description: A directory traversal issue allows attackers to read arbitrary files via a web-static/ URL. This affects Mercury MAC1200R devices, enabling attackers to access files they...

CVE-2023-33188

CVE-2023-33188 (Omni-notes Android) involves an insufficient path validation when displaying note details from an externally-provided intent. The vulnerability allows a malicious or compromised app on the same device to cause Omni-notes to copy files from internal storage to external storage due ...

Insecure Direct Object References (IDOR)

manager-workflow is vulnerable to Insecure Direct Object References IDOR. The vulnerability exists due to improper authentication mechanism used in ProcessServiceImpl.java when operating a workflow, which allows an attacker to access files or directories and cancel an application that doesn't...

CVE-2023-28382: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in ESS REC Agent Server Edition series allows an authenticated attacker to view or alter an arbitrary file on the server. Affected products and versions are as follows: ESS REC Agent Server Edition for Linux V1.0.0 to V1.4.3, ESS REC Agent Server Edition for...

CVE-2023-26215 TIBCO EBX® Add-ons Path Traversal

The server component of TIBCO Software Inc.'s TIBCO EBX Add-ons contains a vulnerability that allows an attacker with low-privileged application access to read system files that are accessible to the web server. Affected releases are TIBCO Software Inc.'s TIBCO EBX Add-ons: versions 4.5.16 and...

Input validation

Wacom Tablet Driver installer prior to 6.4.2-1 for macOS contains an improper link resolution before file access vulnerability. When a user is tricked to execute a small malicious script before executing the affected version of the installer, arbitrary code may be executed with the root privilege...

JVN#90278893: Wacom Tablet Driver installer for macOS vulnerable to improper link resolution before file access

Wacom Tablet Driver installer for macOS provided by Wacom contains an improper link resolution before file access vulnerability CWE-59. Impact When a user is tricked to execute a small malicious script before executing the affected version of the installer, an arbitrary code may be executed with...

CVE-2023-25953

Code injection vulnerability in Drive Explorer for macOS versions 3.5.4 and earlier allows an attacker who can login to the client where the affected product is installed to inject arbitrary code while processing the product execution. Since a full disk access privilege is required to execute LIN...

Contec SolarView Compact 安全漏洞

Contec SolarView Compact is an application system from Contec Japan. It provides a photovoltaic power measurement system. A security vulnerability exists in Contec SolarView Compact 6.0 and earlier versions, which stems from texteditor.php being unrestricted and any file on the server can be read...

CVE-2023-29919

SolarView Compact = 6.0 is vulnerable to Insecure Permissions. Any file on the server can be read or modified because texteditor.php is not restricted...

PT-2023-24279

Name of the Vulnerable Software and Affected Versions: Fortinet FortiNAC versions 7.2.1 and earlier, 9.4.3 and earlier Description: The issue is related to an improper neutralization of special elements used in a command, also known as 'command injection', which allows an attacker to gain limited...

PT-2023-17177 · Unknown · Settings Module

Name of the Vulnerable Software and Affected Versions: Settings module affected versions not specified Description: The issue concerns a file privilege escalation vulnerability in the Settings module. Successful exploitation of this vulnerability may affect confidentiality. Recommendations: At th...

Prestashop 路径遍历漏洞

PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. Prestashop 1.7.20 and previous versions of the existence of path traversal...

Directory Traversal

johnpbloch/wordpress-core is vulnerable to Directory Traversal. The vulnerability exists in the determinelocale function via wplang parameter due to lack of file access restrictions which allows an unauthenticated attacker to access and load arbitrary translation files and to inject and execute...

CVE-2023-20171

Multiple vulnerabilities in Cisco Identity Services Engine ISE could allow an authenticated attacker to delete or read arbitrary files on the underlying operating system. To exploit these vulnerabilities, an attacker must have valid credentials on an affected device. For more information about...

Server side request forgery (ssrf)

Multiple vulnerabilities in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to read arbitrary files or conduct a server-side request forgery SSRF attack through an affected device. To exploit these vulnerabilities, an attacker...

Path Traversal

mlflow is vulnerable to Path Traversal. The vulnerability exists because the handlers.py does not properly sanitize the path parameter, which allows an attacker to access files outside the expected directory and read arbitrary files through the /get-artifact API endpoint...