18812 matches found
CVE-2023-43081
CVE-2023-43081 affects Dell PowerProtect Agent for File System (versions 19.14 and prior). The vulnerability stems from incorrect default permissions in the ddfscon component, enabling a low-privileged local attacker to potentially overwrite log files. Public impact statements in connected docume...
CVE-2023-43081
PowerProtect Agent for File System Version 19.14 and prior, contains an incorrect default permissions vulnerability in ddfscon component. A low Privileged local attacker could potentially exploit this vulnerability, leading to overwriting of log files...
CVE-2023-43081
PowerProtect Agent for File System Version 19.14 and prior, contains an incorrect default permissions vulnerability in ddfscon component. A low Privileged local attacker could potentially exploit this vulnerability, leading to overwriting of log files...
The vulnerability of the NTFS file system in Windows operating systems allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the NTFS file system in Windows operating systems is related to insufficient protection of operational data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
PT-2023-28688 · Dell · Powerprotect Agent For File System
Name of the Vulnerable Software and Affected Versions: PowerProtect Agent for File System versions 19.14 and prior Description: The issue is related to incorrect default permissions in the ddfscon component, allowing a low-privileged local attacker to potentially overwrite log files...
GHSA-H73M-PCFW-25H2 Download to arbitrary folder can lead to RCE
Summary A web UI user can store files anywhere on the pyLoad server and gain command execution by abusing scripts. Details When a user creates a new package, a subdirectory is created within the /downloads folder to store files. This new directory name is derived from the package name, except a...
Node.js: Improper handling of wildcards in --allow-fs-read and --allow-fs-write
A vulnerability was found in the Node.js permission model documentation regarding improper handling of wildcards in the --allow-fs-read and --allow-fs-write options. The documentation did not make clear that wildcards should only be used as the last character of a file path. This could result in...
PT-2023-9101 · Linux +5 · Linux Kernel +5
Name of the Vulnerable Software and Affected Versions: Linux kernel affected versions not specified Description: The issue is related to the f2fs file system in the Linux kernel, where an unused xattr space is not always zeroed, leading to potential security risks. When setting an xattr, the xatt...
CLSA-2023-1700164193 grub2: Fix of CVE-2023-4692
CVE-2023-4692: ntfs: checks to ensure that NTFS drive's sector numbers are never written beyond the boundary...
Important: kernel
Issue Overview: A race condition between two functions, lmLogClose and txEnd, in the Linux kernel's JFS filesystem can lead to a use-after-free vulnerability and crash. CVE-2023-3397 An issue was discovered in the Linux kernel before 6.5.9, exploitable by local users with userspace access to MMIO...
CVE-2023-6032
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
Path traversal
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
CVE-2023-6032
CVE-2023-6032 is a path traversal vulnerability in Schneider Electric Galaxy VS and Galaxy VL Network Management Cards accessible over HTTPS. The root cause is improper limitation of a pathname to a restricted directory, enabling filesystem enumeration and file download. Documented affected produ...
CVE-2023-6032
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause a file system enumeration and file download when an attacker navigates to the Network Management Card via HTTPS...
CVE-2023-36425
Windows Distributed File System DFS Remote Code Execution Vulnerability...
CVE-2023-36424
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2023-36424
Windows Common Log File System Driver Elevation of Privilege Vulnerability...
CVE-2023-36398
Windows NTFS Information Disclosure Vulnerability...