18811 matches found
CVE-2023-4001 Grub2: bypass the grub password protection feature
An authentication bypass flaw was found in GRUB due to the way that GRUB uses the UUID of a device to search for the configuration file that contains the password hash for the GRUB password protection feature. An attacker capable of attaching an external drive such as a USB stick containing a fil...
VulnCheck KEV: CVE-2019-14251
An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a document on the server once successfully authenticated. However, an attacker can leverage downloadDocServer to traverse the file system and access files or directories that are...
Directory traversal
A directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice V10 before V10R3.26.1 allows a remote attacker to view the contents of arbitrary files in the local file system. An unauthenticated attacker might obtain sensitive files that allow for the compromise o...
GHSA-8QW9-GF7W-42X5 Minor fix to previous patch for CVE-2022-35918
Impact The initial vulnerability identified in Streamlit apps using custom components, allowing for directory traversal attacks, was addressed in version 1.11.1. However, a minor issue persisted, which could still potentially expose certain files on the server file-system under specific condition...
Microsoft Common Log File System Elevation of Privilege Vulnerability
The Microsoft Common Log File System is Microsoft's Common Log File System CLFS API provides a log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize log access. Microsoft Common Log File System elevation of privilege vulnerability. An...
The vulnerability of the Common Log File System (CLFS) log management subsystem in Windows operating systems allows attackers to escalate their privileges.
The vulnerability of the Common Log File System CLFS log management subsystem in Windows operating systems is related to deficiencies in access control. Exploiting this vulnerability can allow attackers to enhance their privileges...
IBM AIX和IBM Vios 输入验证错误漏洞
IBM AIX and IBM Vios are both products of the International Business Machines IBM Corporation.IBM AIX is an open-standards-based UNIX operating system developed for the IBM Power architecture.IBM Vios is part of the PowerVm® Editions hardware feature. Helps to share physical I/O resources between...
CVE-2022-42816
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
CVE-2022-42816
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
Design/Logic Flaw
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
CVE-2022-42816
CVE-2022-42816 is a macOS vulnerability described as a logic issue related to state management. According to the provided sources, it is addressed in macOS Ventura 13, and the issue could allow an app to modify protected parts of the file system. The primary publicly available details identify th...
CVE-2022-42816
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
CVE-2022-42816
A logic issue was addressed with improved state management. This issue is fixed in macOS Ventura 13. An app may be able to modify protected parts of the file system...
CVE-2023-48258
The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session...
Session fixation
The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session...
CVE-2023-48258
CVE-2023-48258 allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request within a victim’s session. The connected feeds (NVD, Red Hat, PRION, etc.) corroborate the basic impact, but none provide explicit details on affected products, exact versions, e...
CVE-2023-48258
The vulnerability allows a remote attacker to delete arbitrary files on the file system via a crafted URL or HTTP request through a victim’s session...
Apple macOS Ventura Security Vulnerability
Apple macOS Ventura is a desktop operating system from Apple Inc. in the United States. A security vulnerability exists in Apple macOS Ventura version 13, which originates from an application that may be able to modify protected portions of the file system...