CVE-2020-23039

CVE-2020-23039 concerns Folder Lock v3.4.5, where a stored XSS vulnerability exists in the Create Folder function (Create module). The underlying issue is lack of data validation/filtering for user-supplied data in folder names/paths, allowing an attacker to inject arbitrary web scripts or HTML t...

CVE-2020-23039

Folder Lock v3.4.5 was discovered to contain a stored cross-site scripting XSS vulnerability in the Create Folder function under the 'create' module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload as a path or folder name...

CVE-2021-42540

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

CVE-2021-42542

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

CVE-2021-30359

The Harmony Browse and the SandBlast Agent for Browsers installers must have admin privileges to execute some steps during the installation. Because the MS Installer allows regular users to repair their installation, an attacker running an installer before 90.08.7405 can start the installation...

CVE-2021-42542

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

Directory traversal

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

Code injection

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

CVE-2021-42542 Emerson WirelessHART Gateway

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure...

CVE-2021-42542

CVE-2021-42542 affects Emerson WirelessHART Gateway devices, where a directory traversal flaw stems from mishandling the structure of the supplied backup folder during restore. Public sources (NVD, CVE record, and ICS advisory) assign a CVSSv3 base score of 8.0 (high) and note remote exploitation...

CVE-2021-42540 Emerson WirelessHART Gateway

The affected product is vulnerable to a unsanitized extract folder for system configuration. A low-privileged user can leverage this logic to overwrite the settings and other key functionality...

CVE-2021-38465

The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable...

CVE-2021-38465

The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable...

Design/Logic Flaw

The webinstaller is a Golang web server executable that enables the generation of an Auvesy image agent. Resource consumption can be achieved by generating large amounts of installations, which are then saved without limitation in the temp folder of the webinstaller executable...

CVE-2021-38465

The CVE-2021-38465 issue affects Auvesy Versiondog’s webinstaller (a Golang web server used to generate an Auvesy image agent). The root cause is uncontrolled resource consumption: generating many installations can cause unlimited, temp-folder storage growth, enabling denial of service through re...

Emerson WirelessHART Gateway 路径遍历漏洞

The Emerson WirelessHART Gateway is a wireless gateway from Emerson Corporation. A path traversal vulnerability exists in the Emerson WirelessHART Gateway that stems from improper handling of the structure of the supplied backup folder. An attacker could use this vulnerability to cause directory...

PT-2021-22139 · Auvesy · Auvesy Webinstaller

Name of the Vulnerable Software and Affected Versions: Auvesy webinstaller affected versions not specified Description: The issue concerns a Golang web server executable used for generating an Auvesy image agent. It allows for resource consumption by creating a large number of installations that...

NewSoftwares Folder Lock 跨站脚本漏洞

Folder Lock is a perfect data security application from NewSoftwares, Inc. Folder Lock is vulnerable to a cross-site scripting vulnerability in v3.4.5, which stems from the " Create Folder" function under the "Create" module lacks a data validation filter for user-supplied data and output. An...

Emerson WirelessHART Gateway 安全漏洞

The Emerson WirelessHART Gateway is a wireless gateway from Emerson USA. A security vulnerability exists in Emerson WirelessHART Gateway that stems from the susceptibility of the affected product to an unsterilized system configuration unzipped folder. An attacker could exploit the vulnerability ...

AUVESY Versiondog Resource Management Error Vulnerability (CNVD-2021-82925)

AUVESY Versiondog is an automated production data and change management software solution from AUVESY Germany. a resource management error vulnerability exists in AUVESY Versiondog, which could be exploited by an attacker to consume resources by generating a large number of installations, which...