CVE-2022-39040

aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

Path traversal

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

PT-2023-14906 · Unknown · Vitals Esp

Name of the Vulnerable Software and Affected Versions: Vitals ESP affected versions not specified Description: The Vitals ESP upload function has a path traversal issue. A remote attacker with general user privileges can exploit this to access arbitrary system files. Recommendations: At the momen...

CVE-2022-46309 Galaxy Software Services Corporation. Vitals ESP - Arbitrary Path File Reading

Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to access arbitrary system files...

CVE-2022-46305 ChangingTec ServiSign - Path Traversal

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vulnerability to bypass authentication and access arbitrary system files...

CVE-2022-46309

CVE-2022-46309 stems from a path traversal vulnerability in the Vitals ESP upload function of Galaxy Software Services’ Vitals ESP (a Knowledge Management System). The vulnerability can be exploited by a remote attacker with general user privileges to read arbitrary system files, as described in ...

CVE-2022-39040 aEnrich a+HRD - Path Traversal

aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

ServiSign 路径遍历漏洞

Changingtec ServiSign is a system from Changingtec Taiwan, China. The system provides a cross-platform solution for digital signatures and verification. A security vulnerability exists in ServiSign. An attacker could exploit the vulnerability to bypass authentication and access arbitrary system...

CVE-2022-39040 aEnrich a+HRD - Path Traversal

aEnrich a+HRD log read function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and download arbitrary system files...

Galaxy Software Services Vitals ESP 路径遍历漏洞

Galaxy Software Services Vitals ESP is a Knowledge Management System KMS for office use from Galaxy Software Services, a company based in China. A security vulnerability exists in Galaxy Software Services Vitals ESP due to a path traversal vulnerability in the upload function. The vulnerability c...

CVE-2022-34669

NVIDIA GPU Display Driver for Windows contains a vulnerability in the user mode layer, where an unprivileged regular user can access or modify system files or other files that are critical to the application, which may lead to code execution, denial of service, escalation of privileges, informati...

Huawei EulerOS: Security Advisory for shadow (EulerOS-SA-2022-2944)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Nokia FastMile 3TG00118ABAD52 路径遍历漏洞

Nokia FastMile 3TG00118ABAD52 is a fixed wireless access from Nokia Finland. A security vulnerability exists in the Nokia FastMile 3TG00118ABAD52 that stems from an authenticated path traversal vulnerability that allows an attacker to read any named pipe file on the system...

CVE-2022-41591

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files...

CVE-2022-41591

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files...

CVE-2022-41591

The backup module has a path traversal vulnerability. Successful exploitation of this vulnerability causes unauthorized access to other system files...

CVE-2022-41591

The CVE-2022-41591 entry describes a path traversal vulnerability in the backup module of Huawei HarmonyOS. Affected software is HarmonyOS; the root cause is improper handling of file paths in the backup component, enabling an attacker to access unauthorized system files. Publicly available refer...

CVE-2022-20449

In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

Path traversal

In writeApplicationRestrictionsLAr of UserManagerService.java, there is a possible overwrite of system files due to a path traversal error. This could lead to local denial of service with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-14671 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-13 Description: The issue is related to a path traversal error in the writeApplicationRestrictionsLAr function of UserManagerService.java. This error could allow an overwrite of system files,...