Lucene search
+L

6819 matches found

Cvelist
Cvelist
•added 2022/02/11 5:40 p.m.•43 views

CVE-2022-0483 Local privilege escalation due to insecure folder permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

8.1AI score0.00197EPSS
SaveExploits0References1
CVE
CVE
•added 2022/02/11 5:40 p.m.•118 views

CVE-2022-0483

CVE-2022-0483 affects Acronis VSS Doctor (Windows) prior to build 53. The vulnerability is a local privilege escalation caused by insecure folder permissions, allowing a low-privileged attacker to gain higher privileges on affected systems. The NVD entry confirms the local attack vector with a CV...

7.8CVSS7.9AI score0.00197EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2022/02/11 12:00 a.m.•16 views

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

7.8CVSS7.2AI score0.00197EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/11 12:00 a.m.•9 views

CVE-2022-0483: Uncontrolled Search Path Element

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

7.8CVSS7AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2022/02/11 12:00 a.m.•5 views

PT-2022-13207

Name of the Vulnerable Software and Affected Versions Acronis VSS Doctor Windows versions prior to build 53 Description The issue is related to local privilege escalation due to insecure folder permissions. Recommendations For versions prior to build 53, update to build 53 or later to resolve the...

7.8CVSS0.00197EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2022/02/11 12:00 a.m.•24 views

Acronis VSS Doctor code-related vulnerabilities

Acronis VSS Doctor is a diagnostic and repair tool from Acronis Singapore. It is available free of charge to help you quickly identify and effectively repair the most common Volume Shadow Copy Service problems. A security vulnerability exists in versions prior to Acronis VSS Doctor build 53 that...

7.8CVSS7.3AI score0.00197EPSS
SaveExploits0References2
Acronis
Acronis
•added 2022/02/11 12:00 a.m.•16 views

Local privilege escalation due to insecure folder permissions

...

7.8CVSS7.6AI score0.00197EPSS
SaveExploits0References1Affected Software1
Github Security Blog
Github Security Blog
•added 2022/02/10 8:28 p.m.•73 views

Path Traversal in Eclipse Vert

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0-milestone1, 4.0.0-milestone2, 4.0.0-milestone3, 4.0.0-milestone4, 4.0.0-milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

9.8CVSS2.8AI score0.02002EPSS
SaveExploits0References10Affected Software1
NVD
NVD
•added 2022/02/09 11:15 p.m.•32 views

CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

8.1CVSS0.00831EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2022/02/09 11:15 p.m.•23 views

CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

7.5CVSS5.8AI score0.00831EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/02/09 11:15 p.m.•10 views

CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

8.1CVSS7.3AI score0.00831EPSS
SaveExploits0References2
Prion
Prion
•added 2022/02/09 11:15 p.m.•34 views

Input validation

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

5CVSS7.5AI score0.00831EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2022/02/09 10:05 p.m.•44 views

CVE-2021-26613 tobesoft nexacro arbitrary file creation vulnerability

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

8.1CVSS8.2AI score0.00831EPSS
SaveExploits0References1
CVE
CVE
•added 2022/02/09 10:05 p.m.•117 views

CVE-2021-26613

CVE-2021-26613 affects the Nexacro framework. The vulnerability arises from improper input validation in Nexacro that permits copying a file to the startup folder via the rename method. Impact is described in sources as potentially enabling arbitrary file creation or modification in startup-relat...

8.1CVSS7.7AI score0.00831EPSS
SaveExploits0References1Affected Software1
attackerkb
attackerkb
•added 2022/02/09 5:15 a.m.•13 views

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...

4.3CVSS5.8AI score0.00756EPSS
SaveExploits1References3
NVD
NVD
•added 2022/02/09 5:15 a.m.•38 views

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...

4.3CVSS0.00756EPSS
SaveExploits1References2
Prion
Prion
•added 2022/02/09 5:15 a.m.•25 views

Design/Logic Flaw

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...

4CVSS4.6AI score0.00756EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/02/09 4:31 a.m.•38 views

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...

4.8AI score0.00756EPSS
SaveExploits1References2
osv_cve
osv_cve
•added 2022/02/09 4:31 a.m.•36 views

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...

6.7AI score
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/02/09 12:00 a.m.•10 views

CVE-2022-24694: Files or Directories Accessible to External Parties

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...

4.3CVSS5.5AI score0.00756EPSS
SaveExploits1References2
Rows per page
Query Builder