org.jenkins-ci.plugins.workflow:workflow-aggregator (1.15-beta-1), org.jenkins-ci.plugins.workflow:workflow-cps-global-lib (1.15-beta-1) +2 more potentially affected by CVE-2022-25180 via org.jenkins-ci.plugins.workflow:workflow-cps (1.15-beta-1)

org.jenkins-ci.plugins.workflow:workflow-cps MAVEN version 1.15-beta-1 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.plugins.workflow:workflow-cps and may be impacted: - org.jenkins-ci.plugins.workflow:workflow-aggregator 1.15-beta-1 -...

PT-2022-1634

Name of the Vulnerable Software and Affected Versions Trend Micro Apex One versions 10.0 SP1 and earlier Trend Micro Apex One as a Service versions prior to the fixed version Trend Micro Worry-Free Business Security 10.0 SP1 and earlier Trend Micro Worry-Free Business Security Services agents...

PHPUnit Command Injection Vulnerability

PHPUnit allows remote attackers to execute arbitrary PHP code via HTTP POST data beginning with a "?php " substring, as demonstrated by an attack on a site with an exposed /vendor folder, i.e., external access to the /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php URI...

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

Privilege escalation

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483 Local privilege escalation due to insecure folder permissions

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483

CVE-2022-0483 affects Acronis VSS Doctor (Windows) prior to build 53. The vulnerability is a local privilege escalation caused by insecure folder permissions, allowing a low-privileged attacker to gain higher privileges on affected systems. The NVD entry confirms the local attack vector with a CV...

PT-2022-13207

Name of the Vulnerable Software and Affected Versions Acronis VSS Doctor Windows versions prior to build 53 Description The issue is related to local privilege escalation due to insecure folder permissions. Recommendations For versions prior to build 53, update to build 53 or later to resolve the...

Local privilege escalation due to insecure folder permissions

...

Acronis VSS Doctor 代码问题漏洞

Acronis VSS Doctor is a diagnostic and repair tool from Acronis Singapore. It is available free of charge to help you quickly identify and effectively repair the most common Volume Shadow Copy Service problems. A security vulnerability exists in versions prior to Acronis VSS Doctor build 53 that...

CVE-2022-0483

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

CVE-2022-0483: Uncontrolled Search Path Element

Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis VSS Doctor Windows before build 53...

Path Traversal in Eclipse Vert

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0-milestone1, 4.0.0-milestone2, 4.0.0-milestone3, 4.0.0-milestone4, 4.0.0-milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

CVE-2021-26613

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

Input validation

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

CVE-2021-26613

CVE-2021-26613 affects the Nexacro framework. The vulnerability arises from improper input validation in Nexacro that permits copying a file to the startup folder via the rename method. Impact is described in sources as potentially enabling arbitrary file creation or modification in startup-relat...

CVE-2021-26613 tobesoft nexacro arbitrary file creation vulnerability

improper input validation vulnerability in nexacro permits copying file to the startup folder using rename method...

CVE-2022-24694

In Mahara 20.10 before 20.10.4, 21.04 before 21.04.3, and 21.10 before 21.10.1, the names of folders in the Files area can be seen by a person not owning the folders. Only folder names are affected. Neither file names nor file contents are affected...