IOBit Protected Folder 安全漏洞

IOBit Protected Folder is a file protection tool from IOBit Inc. It is used to secure important folders, data and privacy. A security vulnerability exists in IOBit Protected Folder version 1.3.0 and earlier versions, which stems from a null pointer dereference...

CVE-2024-49385

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

CVE-2024-49385

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

CVE-2024-49385

CVE-2024-49385 affects Acronis True Image (Windows) prior to build 41736. Root cause: insecure folder permissions allow unauthorized access to sensitive information. Impact: confidential data disclosure locally. Affected component: the software’s Windows folder permissions; exact vulnerable folde...

CVE-2024-49385: Incorrect Permission Assignment for Critical Resource

Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis True Image Windows before build 41736, Acronis True Image OEM Windows before build 42575...

PT-2025-2831 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image Windows before build 41736 Description: Sensitive information disclosure is possible due to insecure folder permissions. This issue affects Acronis True Image on Windows. Recommendations: For Acronis True Image Windows befo...

Acronis True Image 安全漏洞

Acronis True Image is a well-known data backup and restore software from the Swiss company Acronis. The software can be used to create drive and disk images and can restore the image when a clean system is needed. A security vulnerability exists in versions prior to Acronis True Image build 41736...

ASB-A-233605527

In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This could lead to local escalation of privilege with User execution privileges needed. User interaction is needed for exploitation...

TeamPass does not properly check whether a folder is in a user's allowed folders list

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

Improper Authorization

Overview nilsteampassnet/teampass is a password manager. Affected versions of this package are vulnerable to Improper Authorization due to improper validation of user permissions in the items.queries.php component. An attacker can gain unauthorized access to folders by exploiting the lack of prop...

GHSA-2697-96MV-3GFM TeamPass does not properly check whether a folder is in a user's allowed folders list

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

CVE-2024-50701

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

CVE-2024-50701

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

TeamPass 安全漏洞

TeamPass is an open source password manager from the individual developer Nils Laumaillé. A security vulnerability exists in versions prior to TeamPass 3.1.3.1, which stems from the inability to properly check whether a folder is located in an administrator-defined list of user-allowed folders wh...

CVE-2024-50701

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

CVE-2024-50701: Incorrect Privilege Assignment

TeamPass before 3.1.3.1, when retrieving information about access rights for a folder, does not properly check whether a folder is in a user's allowed folders list that has been defined by an admin...

PT-2025-3792 · Iobit · Iobit Protected Folder

Name of the Vulnerable Software and Affected Versions: IObit Protected Folder versions up to 13.6.0.5 Description: A problem has been found in the function 0x8001E000/0x8001E004 in the library IUProcessFilter.sys of the component IOCTL Handler, which leads to null pointer dereference. The...

PT-2025-3791 · Iobit · Iobit Protected Folder

Name of the Vulnerable Software and Affected Versions: IOBit Protected Folder versions up to 1.3.0 Description: A problem has been found in the function 0x22200c in the library pffilter.sys of the component IOCTL Handler. This issue leads to null pointer dereference. The attack must be approached...

PT-2025-3793 · Iobit · Iobit Protected Folder

Name of the Vulnerable Software and Affected Versions: IObit Protected Folder versions up to 13.6.0.5 Description: A vulnerability was found in the function 0x8001E000/0x8001E00C/0x8001E004/0x8001E010 in the library IURegistryFilter.sys of the component IOCTL Handler. The manipulation leads to nu...

CVE-2024-56159

Astro is a web framework for content-driven websites. A bug in the build process allows any unauthenticated user to read parts of the server source code. During build, along with client assets such as css and font files, the sourcemap files for the server code are moved to a publicly-accessible...