6701 matches found
CVE-2020-26606: Undefined Security Weakness
An issue was discovered on Samsung mobile devices with O8.x, P9.0, Q10.0, and R11.0 software. An attacker can access certain Secure Folder content via a debugging command. The Samsung ID is SVE-2020-18673 October 2020...
PT-2020-16479
Name of the Vulnerable Software and Affected Versions Samsung mobile devices with O8.x software Samsung mobile devices with P9.0 software Samsung mobile devices with Q10.0 software Samsung mobile devices with R11.0 software Description An issue allows an attacker to access certain Secure Folder...
CVE-2020-13953
In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...
CVE-2020-13953
In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...
CVE-2020-21244
An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/instlang.php...
Code injection
In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...
CVE-2020-13953
In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...
CVE-2020-21244
An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/instlang.php...
CVE-2020-21244
An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/instlang.php...
PT-2020-15332
Name of the Vulnerable Software and Affected Versions FrontAccounting version 2.4.7 Description An issue was discovered in FrontAccounting, which is a Directory Traversal vulnerability. This vulnerability can be exploited to empty a folder via the admin/inst lang.php endpoint. The estimated numbe...
PT-2020-13801
Name of the Vulnerable Software and Affected Versions Apache Tapestry versions 5.4.0 through 5.5.0 Description The issue allows an attacker to download files inside the WEB-INF folder of the WAR being run by crafting specific URLs. Recommendations For Apache Tapestry versions 5.4.0 through 5.5.0,...
CVE-2020-13953: Files or Directories Accessible to External Parties
In Apache Tapestry from 5.4.0 to 5.5.0, crafting specific URLs, an attacker can download files inside the WEB-INF folder of the WAR being run...
CVE-2020-21244: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/instlang.php...
ActFax Privilege Control Vulnerability
ActFax is a fax server software of Austria ActiveFax, ActiveFax can make your computer into a virtual fax machine, realize the transmission of fax and Email in Windows and UNIX applications at will, suitable for all sizes of network and stand-alone use. A security vulnerability exists in ActFax...
CVE-2020-15843
ActFax Version 7.10 Build 0335 2020-05-25 is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal. The folder permissions allow "Full Control" to...
CVE-2020-15843
ActFax Version 7.10 Build 0335 2020-05-25 is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal. The folder permissions allow "Full Control" to...
Privilege escalation
ActFax Version 7.10 Build 0335 2020-05-25 is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal. The folder permissions allow "Full Control" to...
CVE-2020-15843
ActFax Version 7.10 Build 0335 2020-05-25 is susceptible to a privilege escalation vulnerability due to insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install\ and %PROGRAMFILES%\ActiveFax\Terminal. The folder permissions allow "Full Control" to...
CVE-2020-15843
ActFax Version 7.10 Build 0335 (2020-05-25) is affected by a privilege-escalation vulnerability caused by insecure folder permissions on %PROGRAMFILES%\ActiveFax\Client, %PROGRAMFILES%\ActiveFax\Install, and %PROGRAMFILES%\ActiveFax\Terminal. The permissions grant Full Control to Everyone, enabli...
