CVE-2023-21441

The CVE-2023-21441 entry concerns a Guarded Routine component in Android on Samsung devices with insufficient verification of data authenticity. Affected versions are Android Q before 2.6.30.6, Android R before 3.1.21.10, and Android S before 3.5.2.23, where a local attacker could access protecte...

CVE-2023-21448: Improper Limitation of a Pathname to a Restricted Directory

Path traversal vulnerability in Samsung Cloud prior to version 5.3.0.32 allows attacker to access specific png file...

CVE-2023-25150

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users...

CVE-2023-25150 Document content of files can be obtained through Collabora for files of other users

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users...

PT-2023-2182 · Ibm · Ibm Db2

Name of the Vulnerable Software and Affected Versions: IBM Db2 for Linux, UNIX and Windows versions 10.5, 11.1, and 11.5 Description: The issue is related to an information disclosure where sensitive information may be included in a log file, potentially allowing an attacker to gain unauthorized...

CVE-2023-25150: Improper Access Control

Nextcloud office/richdocuments is an office suit for the nextcloud server platform. In affected versions the Collabora integration can be tricked to provide access to any file without proper permission validation. As a result any user with access to Collabora can obtain the content of other users...

Docker authorization issue vulnerability

Docker is an open source application container engine from the U.S. company Docker. The product supports creating a container lightweight virtual machine and deploying and running applications on Linux systems, as well as automating the installation, deployment, and upgrade of applications via...

PT-2023-12675 · Opensuse · Opensuse

Name of the Vulnerable Software and Affected Versions: openSUSE paste versions prior to b57b9f87e303a3db9465776e657378e96845493b Description: An Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' issue allows remote attackers to place Javascript into SVG files...

CVE-2022-44343: Files or Directories Accessible to External Parties

CRMEB 4.4.4 is vulnerable to Any File download...

The vulnerability of the Factory Interface Network Service (FINS) protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D allows a intruder to gain access to read, modify, or delete files, execute arbitrary code, or cause a service failure.

The vulnerability of the Factory Interface Network Service FINS protocol implementation in the microcomputer-based programmable logic controllers OMRON CP1L-EL20DR-D is related to insufficient protection of service data during code debugging. Exploiting this vulnerability can allow an attacker to...

CVE-2022-3560: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in pesign. The pesign package provides a systemd service used to start the pesign daemon. This service unit runs a script to set ACLs for /etc/pki/pesign and /run/pesign directories to grant access privileges to users in the 'pesign' group. However, the script doesn't check for...

CVE-2023-20030

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to access sensitive information, conduct a server-side request forgery SSRF attack through an affected device, or negatively impact the responsiveness of the...

CVE-2022-46835

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due t...

Path traversal

ubireaderextractfiles is vulnerable to path traversal when run against specifically crafted UBIFS files, allowing the attacker to overwrite files outside of the extraction directory provided the process has write access to that file or directory. This is due to the fact that a node name...

CVE-2022-46835 SailPoint IdentityIQ JavaServer File Path Traversal Vulnerability

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due t...

CVE-2022-39059 ChangingTec MegaServiSignAdapter - Path Traversal

ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files...

PT-2023-15067

Name of the Vulnerable Software and Affected Versions SailPoint IdentityIQ versions 8.0 through 8.0p5 SailPoint IdentityIQ versions 8.1 through 8.1p6 SailPoint IdentityIQ versions 8.2 through 8.2p4 SailPoint IdentityIQ versions 8.3 through 8.3p1 Description The issue allows access to arbitrary...

CVE-2022-46835: Improper Limitation of a Pathname to a Restricted Directory

IdentityIQ 8.3 and all 8.3 patch levels prior to 8.3p2, IdentityIQ 8.2 and all 8.2 patch levels prior to 8.2p5, IdentityIQ 8.1 and all 8.1 patch levels prior to 8.1p7, IdentityIQ 8.0 and all 8.0 patch levels prior to 8.0p6 allow access to arbitrary files in the application server filesystem due t...

CVE-2022-46835

IdentityIQ CVE-2022-46835 is a path traversal in JavaServer Faces (JSF) 2.2.20 that allows reading arbitrary files from the application server filesystem. Affected: IdentityIQ 8.3 (all 8.3 patch levels before 8.3p2), 8.2 (before 8.2p5), 8.1 (before 8.1p7), 8.0 (before 8.0p6). Root cause reference...

CVE-2022-39059: Improper Limitation of a Pathname to a Restricted Directory

ChangingTech MegaServiSignAdapter component has a path traversal vulnerability within its file reading function. An unauthenticated remote attacker can exploit this vulnerability to access arbitrary system files...