SAMSUNG Mobile devices 路径遍历漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices, including cell phones, tablets, etc., from the South Korean company Samsung SAMSUNG. A security vulnerability exists in SAMSUNG Mobile devices UriFileUtils versions prior to 4.3.14.39, which stems from a path traversal vulnerability in...

PT-2022-23633 · Samsung · Charm

Name of the Vulnerable Software and Affected Versions: Charm by Samsung versions prior to 1.2.3 Description: The issue allows local attackers to access files without permission via implicit intent, exploiting a PendingIntent hijacking vulnerability in the releaseAlarm function. Recommendations: F...

PT-2022-23634 · Samsung · Charm

Name of the Vulnerable Software and Affected Versions: Charm by Samsung versions prior to 1.2.3 Description: The issue allows local attackers to access files without permission via implicit intent, exploiting a PendingIntent hijacking vulnerability in the cancelAlarmManager function...

SAMSUNG Mobile devices 安全漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung, including cell phones, tablets, and more. A security vulnerability exists in SAMSUNG Mobile devices Charm versions prior to 1.2.3, which stems from a PendingIntent hijacking vulnerability in...

CVE-2022-33721: Improper Control of Generation of Code

A vulnerability using PendingIntent in DeX for PC prior to SMR Aug-2022 Release 1 allows attackers to access files with system privilege...

CVE-2022-36830: Use of Implicit Intent for Sensitive Communication

PendingIntent hijacking vulnerability in cancelAlarmManager in Charm by Samsung prior to version 1.2.3 allows local attackers to access files without permission via implicit intent...

CVE-2022-36835: Exposure of Sensitive Information to an Unauthorized Actor

Implicit Intent hijacking vulnerability in Samsung Internet Browser prior to version 17.0.7.34 allows attackers to access arbitrary files...

SAMSUNG Internet Browser 安全漏洞

SAMSUNG Internet Browser is a Samsung Browser from Samsung South Korea. A security vulnerability exists in SAMSUNG Internet Browser versions prior to 17.0.7.34, which stems from an implicit Intent hijacking vulnerability that can be exploited by an attacker to access arbitrary files...

PT-2022-21838 · Samsung · Dex For Pc

Name of the Vulnerable Software and Affected Versions: DeX for PC versions prior to SMR Aug-2022 Release 1 Description: A vulnerability using PendingIntent in DeX for PC allows attackers to access files with system privilege. Recommendations: For DeX for PC versions prior to SMR Aug-2022 Release ...

CVE-2022-31793

dorequest in request.c in muhttpd before 1.1.7 allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first character when serving files. Arris NVG443, NVG599, NVG589, and...

CVE-2022-35216

OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files...

CVE-2022-35216: Improper Limitation of a Pathname to a Restricted Directory

OMICARD EDM’s mail image relay function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to by-pass authentication and access arbitrary system files...

ITPison OMICARD EDM 路径遍历漏洞

ITPison OMICARD EDM is a high-speed email newsletter EDM marketing and distribution system from ITPison China. A security vulnerability exists in ITPison OMICARD EDM versions v5.8 to v6.0. The vulnerability stems from a path traversal in OMICARD EDM's Mail Image Forwarding feature, which can be...

PT-2022-20938 · Arris · Bgw320 +5

Name of the Vulnerable Software and Affected Versions: muhttpd versions prior to 1.1.7 Description: The issue allows remote attackers to read arbitrary files by constructing a URL with a single character before a desired path on the filesystem. This occurs because the code skips over the first...

CVE-2022-27621: Improper Limitation of a Pathname to a Restricted Directory

Improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability in webapi component in Synology USB Copy before 2.2.0-1086 allows remote authenticated users to read or write arbitrary files via unspecified vectors...

Synology USB Copy 路径遍历漏洞

Synology USB Copy from Synology China helps you copy files between Synology NAS and external USB/SD storage devices. A path traversal vulnerability exists in Synology USB Copy versions prior to 2.2.0-1086, which stems from an improper restriction on the pathname of a restricted directory in the...

Path Traversal

Description Via the /attachments/:id/download/thumbnails/:filename endpoint, an authenticated user can access any arbitrary file in the system through a path traversal vulnerability in the filename parameter. \ \ The filename parameter is not sanitized and its used to craft the path of the target...

PT-2022-4061 · Vmware · Identity Manager +3

Name of the Vulnerable Software and Affected Versions: VMware Workspace ONE Access, Identity Manager, Connectors and vRealize Automation affected versions not specified Description: The issue is related to a path traversal vulnerability. A malicious actor with network access may be able to access...

IOBit IOTransfer Arbitrary File Write (CVE-2022-24562)

An arbitrary file write vulnerability exists in IOBit IOTransfer. Successful exploitation of this vulnerability could allow an unauthenticated remote attacker to access arbitrary file...

CVE-2022-31195 Path traversal vulnerability in Simple Archive Format package import in DSpace

DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF simple archive format package could cause a file/directory to be...