Lucene search
K

8 matches found

Veracode
Veracode
added 2023/08/06 12:6 p.m.21 views

Privilege Escalation

firefox and thunderbird are vulnerable to Privilege Escalation. An attacker could exploit this vulnerability by creating a malicious website that would show a popup notification asking for permission to access the user's files. If the user clicked on the notification, the permission would be...

8.8CVSS6.6AI score0.00621EPSS
Exploits1References9Affected Software3
Prion
Prion
added 2022/03/18 6:15 p.m.16 views

Path traversal

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files...

5CVSS6.7AI score0.00572EPSS
Exploits0References5Affected Software5
Cvelist
Cvelist
added 2022/03/18 5:59 p.m.23 views

CVE-2022-22585

An issue existed within the path validation logic for symlinks. This issue was addressed with improved path sanitization. This issue is fixed in iOS 15.3 and iPadOS 15.3, watchOS 8.4, tvOS 15.3, macOS Monterey 12.2, macOS Big Sur 11.6.3. An application may be able to access a user's files...

7.2AI score0.00572EPSS
Exploits0References5
NVD
NVD
added 2019/12/18 9:15 p.m.19 views

CVE-2019-5469

An IDOR vulnerability exists in GitLab v12.1.2, v12.0.4, and v11.11.6 that allowed uploading files from project archive to replace other users files potentially allowing an attacker to replace project binaries or other uploaded assets...

6.5CVSS6.1AI score0.00101EPSS
Exploits1References2
Prion
Prion
added 2019/04/09 5:29 a.m.16 views

Directory traversal

A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the location of any other user's files...

4CVSS6.3AI score0.00202EPSS
Exploits1References1Affected Software1
OwnCloud
OwnCloud
added 2012/08/10 5:9 p.m.46 views

Auth bypass in /lib/base.php - ownCloud

/lib/base.php before ownCloud 4.0.8 does not properly validate the userid session variable via WebDAV, which allows authenticated attackers to gain access to other users files. Affected Software ownCloud Server 4.0.8 CVE-2012-5336 Action Taken It is recommended that all instances are upgraded to...

4CVSS6.4AI score0.00298EPSS
Exploits0Affected Software1
securityvulns
securityvulns
added 2011/10/15 12:0 a.m.24 views

Quassel IRC client weak permissions

Weak permissions for user's files and directories...

2.2AI score
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2005/06/21 4:0 a.m.18 views

CVE-2002-1713

The Standard security setting for Mandrake-Security package msec in Mandrake 8.2 installs home directories with world-readable permissions, which could allow local users to read other user's files...

5.7AI score0.00328EPSS
Exploits0References4
Rows per page
Query Builder