1641 matches found
WordPress plugin Best WordPress Gallery Plugin–FooGallery 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed in the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A security vulnerability exists in WordPress...
Nextcloud: admin_audit does not log actions on files in a group folder
The adminaudit app in Nextcloud versions prior to 24.0.4 did not log actions on files in a group folder...
CVE-2024-53921
An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via a symbolic link during the installation process...
CVE-2024-53921
An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via a symbolic link during the installation process...
CVE-2024-6871
G DATA Total Security Incorrect Permission Assignment Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of G DATA Total Security. An attacker must first obtain the ability to execute low-privileged code on the targ...
CVE-2024-9500
A maliciously crafted DLL file when placed in temporary files and folders that are leveraged by the Autodesk Installer could lead to escalation of privileges to NT AUTHORITY/SYSTEM due to insecure privilege management...
CVE-2024-46463
By default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ORIZON has to be modified to prevent this vulnerability...
CVE-2024-46467
By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONEPOINT has to be modified to prevent this vulnerability...
CVE-2024-46462
CVE-2024-46462 affects PRIMX ZEDMAIL for Windows (versions up to 2024.3). By default, dedicated folders are accessible to other users, allowing misuse of technical files and execution of higher-privilege tasks. Root cause described as misconfigured or overly permissive folder access enabling loca...
PT-2024-32001 · Unknown · Zonepoint For Windows
Name of the Vulnerable Software and Affected Versions: ZONEPOINT for Windows versions up to 2024.1 Description: The issue allows other users to access dedicated folders of ZONEPOINT for Windows by default, potentially misusing technical files and making them perform tasks with higher privileges...
Nextcloud 访问控制错误漏洞
Nextcloud is a set of open source self-hosted file synchronization and sharing communication application platform from Nextcloud, Germany. Nextcloud suffers from an Access Control Error vulnerability that stems from the fact that when a file is blocked by access control, users can still copy an...
CVE-2024-46462
By default, dedicated folders of ZEDMAIL for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZEDMAIL has to be modified to prevent this vulnerability...
CVE-2024-46467
By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONEPOINT has to be modified to prevent this vulnerability...
CVE-2024-46463
By default, dedicated folders of ORIZON for Windows up to 2024.3 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ORIZON has to be modified to prevent this vulnerability...
PRIMX CRYHOD 安全漏洞
PRIMX CRYHOD is a PRIMX company used to enable companies to protect employee devices taken off premises in accordance with global management policies. A security vulnerability exists in PRIMX CRYHOD 2024.3 and earlier versions, which stems from the fact that by default dedicated folders can be...
CVE-2024-46467
By default, dedicated folders of ZONEPOINT for Windows up to 2024.1 can be accessed by other users to misuse technical files and make them perform tasks with higher privileges. Configuration of ZONEPOINT has to be modified to prevent this vulnerability...
PRIMX ZEDMAIL 安全漏洞
PRIMX ZEDMAIL is an enterprise messaging application encryption solution from PRIMX Corporation. A security vulnerability exists in PRIMX ZEDMAIL version 2024.3 and earlier, which stems from the fact that by default dedicated folders can be accessed by other users to misuse technical files and...
Amazon Linux 2023 : nodejs, nodejs-devel, nodejs-full-i18n (ALAS2023-2024-766)
It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2024-766 advisory. node-tar is a Tar for Node.js. node-tar prior to version 6.2.1 has no limit on the number of sub-folders created in the folder creation process. An attacker who generates a large number of sub-folders c...