The vulnerability of the software for centralized control of printing devices, Kyocera Device Manager, arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to bypass the authentication process.

The vulnerability of the Kyocera Device Manager software for centralized control of printing devices is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...

The vulnerability of the Java-security-toolkit application programming interface regarding security code management lies in improper restrictions on path names to restricted directories. This allows attackers to execute arbitrary code.

The vulnerability of the Java-security-toolkit application programming interface relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories. Mitigation Mitigation for thi...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability exists in versions prior to Intel Thunderbolt DCH drivers 88, which stems from an improperly restricted buffer that could lead to information disclosure via local access by an authenticated...

Intel Optimization for TensorFlow Security Vulnerability

Intel Optimization for Tensorflow is a set of tools and libraries optimized for the TensorFlow framework from Intel Corporation. A security vulnerability exists in Intel Optimization for TensorFlow prior to version 2.13.0, which stems from an improperly restricted buffer and could lead to privile...

Intel Thunderbolt DCH drivers security vulnerability

Intel Thunderbolt DCH drivers is a driver for Windows from Intel Corporation USA. A security vulnerability exists in versions prior to Intel Thunderbolt DCH drivers 88, which stems from an improperly restricted buffer that could allow privileged users to escalate privileges via local access...

CVE-2024-22024

An XML external entity or XXE vulnerability in the SAML component of Ivanti Connect Secure 9.x, 22.x, Ivanti Policy Secure 9.x, 22.x and ZTA gateways which allows an attacker to access certain restricted resources without authentication...

CVE-2024-24739

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

CVE-2024-24739

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

Design/Logic Flaw

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

Ivanti Connect Secure and Ivanti Policy Secure Code Issue Vulnerabilities

Ivanti Connect Secure and Ivanti Policy Secure are both products of Ivanti Corporation, U.S.A. Ivanti Connect Secure is a secure remote network connection tool.Ivanti Policy Secure is a Network Access Control NAC solution. Ivanti Connect Secure and Ivanti Policy Secure have a code issue...

SAP Bank Account Management Security Vulnerability

SAP Bank Account Management is a bank account management system from SAP, Germany. A security vulnerability exists in SAP Bank Account Management BAM that originates from allowing authenticated users with restricted access to use functionality, which could result in an escalation of privileges...

CVE-2024-24739: Missing Authorization

SAP Bank Account Management BAM allows an authenticated user with restricted access to use functions which can result in escalation of privileges with low impact on confidentiality, integrity and availability of the application...

PT-2024-2742 · Intel · Intel Vroc

Name of the Vulnerable Software and Affected Versions: Intel VROC software versions prior to 8.0.8.1001 Description: The issue is related to improper access control in Intel VROC software, which may allow an authenticated user to potentially enable escalation of privilege via local access. This i...

CVE-2024-1485: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in the decompression function of registry-support. This issue can be triggered if an unauthenticated remote attacker tricks a user into parsing a devfile which uses the parent or plugin keywords. This could download a malicious archive and cause the cleanup process to overwrite o...

DEBIAN-CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

Path traversal

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...

CVE-2024-1459

A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed to JBoss EAP, which may permit access to privileged or restricted files and directories...