Apple iPadOS 安全漏洞

Apple iPadOS is an operating system for the iPad tablet computer from Apple USA. A security vulnerability exists in Apple iPadOS version 17.7.5 that originates from a physical attack that could disable USB Restricted Mode on a locked device...

PT-2025-6097

Name of the Vulnerable Software and Affected Versions iOS versions prior to 18.3.1 iPadOS versions prior to 18.3.1 iPadOS versions prior to 17.7.5 Description A physical attack may disable USB Restricted Mode on a locked device. This issue is related to an authorization problem that has been...

About the security content of iPadOS 17.7.5

About the security content of iPadOS 17.7.5 This document describes the security content of iPadOS 17.7.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are...

Information Exposure

Overview Affected versions of this package are vulnerable to Information Exposure. An attacker can view restricted information by exploiting the visibility settings of the frame publishing function. Workaround This vulnerability can be mitigated by removing the site search or hiding frames...

Connect-CMS information that is restricted to viewing is visible

Impact - Information that is restricted from viewing in the search results of site searches ※ can still be viewed via the main text a feature added in v1.8.0. - Impact by version - v1.8.0 v1.8.3: It will be displayed in the text. - v1.8.0 and earlier: It will not be displayed in the body of the...

GHSA-2237-5R9W-VM8J Connect-CMS information that is restricted to viewing is visible

Impact - Information that is restricted from viewing in the search results of site searches ※ can still be viewed via the main text a feature added in v1.8.0. - Impact by version - v1.8.0 v1.8.3: It will be displayed in the text. - v1.8.0 and earlier: It will not be displayed in the body of the...

CVE-2025-25163

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Zach Swetz Plugin A/B Image Optimizer allows Path Traversal. This issue affects Plugin A/B Image Optimizer: from n/a through 3.3...

CVE-2025-0066

Under certain conditions SAP NetWeaver AS for ABAP and ABAP Platform Internet Communication Framework allows an attacker to access restricted information due to weak access controls. This can have a significant impact on the confidentiality, integrity, and availability of an application...

The vulnerability of the software for deploying and maintaining enterprise-level cloud systems based on IBM Cloud Pak System allows a perpetrator to expose protected information.

The vulnerability of software for deploying and maintaining enterprise-level cloud systems based on IBM Cloud Pak Systems is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to disclose protected...

IBM Maximo Asset Management File Upload Vulnerability

IBM Maximo Asset Management is a comprehensive asset lifecycle and maintenance management solution from International Business Machines IBM. The solution is capable of managing all types of assets, such as facilities, transportation, etc., on a single platform with a single point of control for...

The vulnerability of the Fortinet FortiManager software for centralized device management, as well as the FortiAnalyzer and FortiAnalyzer-BigData tools for security event monitoring and analysis, arises from incorrect restrictions on the path to the restricted-access directory. This allows an attacker to gain access to and read/write arbitrary files in the directory.

The vulnerability of the Fortinet FortiManager software for centralized device management, as well as the FortiAnalyzer and FortiAnalyzer-BigData security monitoring and analysis tools, is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this...

CVE-2022-2969

Delta Industrial Automation DIALink versions prior to v1.5.0.0 Beta 4 uses an external input to construct a pathname intended to identify a file or directory located underneath a restricted parent directory. However, the software does not properly neutralize special elements within the pathname,...

CVE-2022-46412

An issue was discovered in Veritas NetBackup Flex Scale through 3.0. A non-privileged user may escape a restricted shell and execute privileged commands...

CVE-2020-14610

Vulnerability in the Oracle Applications Framework product of Oracle E-Business Suite component: Attachments / File Upload. The supported version that is affected is 12.2.9. Easily exploitable vulnerability allows low privileged attacker with network access via HTTP to compromise Oracle...

CVE-2020-6264

SAP Commerce, versions - 6.7, 1808, 1811, 1905, may allow an attacker to access information under certain conditions which would otherwise be restricted, leading to Information Disclosure...

CVE-2020-6271

SAP Solution Manager Problem Context Manager, version 7.2, does not perform the necessary authentication, allowing an attacker to consume large amounts of memory, causing the system to crash and read restricted data files visible for technical administration users of the diagnostics agent...

CVE-2020-13270

Missing permission check on fork relation creation in GitLab CE/EE 11.3 and later through 13.0.1 allows guest users to create a fork relation on restricted public projects via API...

CVE-2024-12142

CWE-200: Exposure of Sensitive Information to an Unauthorized Actor vulnerability exists that could cause information disclosure of restricted web page, modification of web page and denial of service when specific web pages are modified and restricted functions are invoked...

CVE-2024-30246

Tuleap is an Open Source Suite to improve management of software developments and collaboration. A malicious user could exploit this issue on purpose to delete information on the instance or possibly gain access to restricted artifacts. It is however not possible to control exactly which...

CVE-2024-30263

macro-pdfviewer is a PDF Viewer Macro for XWiki using Mozilla pdf.js. Users with edit rights can access restricted PDF attachments using the PDF Viewer macro, just by passing the attachment URL as the value of the file parameter. Users with view rights can access restricted PDF attachments if the...