CVE-2022-31062 Unauthenticated Local File Inclusion

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds b/deploy/index.php file can be deleted if deploy feature is not used...

CVE-2022-31062

GLPI Inventory Plugin for GLPI is affected by an unauthenticated Local File Inclusion vulnerability in versions before 1.0.2. A public script in the plugin can be used to read system files (root cause: public file/script exposed under b/deploy/index.php path). Impact is reading contents of system...

PT-2022-20499 · Plugin · Plugin

Name of the Vulnerable Software and Affected Versions: Plugin versions prior to 1.0.2 Description: A plugin public script can be used to read the content of system files. Recommendations: For versions prior to 1.0.2, upgrade to version 1.0.2. As a temporary workaround, consider deleting the...

GLPI Inventory Plugin 路径遍历漏洞

GLPI Inventory Plugin is a French GLPI open source plugin . It is used to handle various types of tasks for GLPI agents. A path traversal vulnerability exists in versions prior to GLPI Inventory Plugin 1.0.2, which stems from a public script that can be used to read the contents of system files...

CVE-2022-31062 Unauthenticated Local File Inclusion

Impact A plugin public script can be used to read content of system files. Patches Upgrade to version 1.0.2. Workarounds b/deploy/index.php file can be deleted if deploy feature is not used...

Exploit for CVE-2022-31749

Hook Hook exploits a parameter injection vulnerability in the...

QNAP QTS 4.3.6 < 4.3.6 build 20190919 / 4.4.1 < 4.4.1 build 20190918 Multiple Vulnerabilities (NAS-201911-25)

The version of QNAP QTS installed on the remote host is affected by multiple vulnerabilities, as follows: - An improper input validation vulnerability that allows remote attackers to inject arbitrary code to the system. CVE-2019-7193 - Two external control of file name or path vulnerabilities tha...

CVE-2022-26057

Vulnerabilities in the Mint WorkBench allow a low privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary content as long as the file does not already exist. The Mint WorkBench installer file allows a low-privileged user to run a "repair" operation o...

PT-2022-20615 · Abb · Abb Automation Builder

Name of the Vulnerable Software and Affected Versions: Drive Composer affected versions not specified ABB Automation Builder affected versions not specified Description: The issue allows a low-privileged attacker to create and write to a file anywhere on the file system as SYSTEM with arbitrary...

QNAP Photo Station Multiple Vulnerabilities (NAS-201911-25)

The version of Photo Station running on the remote QNAP NAS is affected by multiple vulnerabilities, as follows: - This improper input validation vulnerability allows remote attackers to inject arbitrary code to the system. To fix the vulnerability, QNAP recommend updating QTS to their latest...

QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

QNAP Photo Station Path Traversal Vulnerability

QNAP devices running Photo Station contain an external control of file name or path vulnerability allowing remote attackers to access or modify system files...

The vulnerability of the CLI component of Fortinet’s FortiAP-S/W2 and FortiAP software solutions allows a hacker to overwrite system files.

The vulnerability of the CLI microprogramming software for Fortinet’s FortiAP-S/W2 and FortiAP devices exists due to insufficient verification of input data in the administration consoles. Exploiting this vulnerability allows a malicious actor to re-write system files using specially created...

CVE-2022-29597

CVE-2022-29597 affects Solutions Atlantic Regulatory Reporting System (RRS) v500. It exposes a Local File Inclusion (LFI) vulnerability via the ShowDocument/ShowDocument.aspx page, where an authenticated user can abuse the fileName parameter to reference internal system files (eg. web.config) and...

CVE-2022-1661

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files...

CVE-2022-1661 Keysight N6854A Geolocation server and N6841A RF Sensor software

The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files...

CVE-2022-26688

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files...

Input validation

An issue in the handling of symlinks was addressed with improved validation. This issue is fixed in Security Update 2022-003 Catalina, macOS Monterey 12.3, macOS Big Sur 11.6.5. A malicious app with root privileges may be able to modify the contents of system files...

GHSA-P2VM-88RG-WFR2 XML injection in Crafter CMS

In Crafter CMS Crafter Studio 3.0 prior to 3.0.1 an unauthenticated attacker is able to create a site with specially crafted XML that allows the retrieval of OS files out-of-band...

CVE-2022-31466

Time of Check - Time of Use TOCTOU vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when th...