CWE-548 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-548/ Thu, 23 Feb 2023 14:09:46 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-548 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-548/ 32 32 CVE-2021-32510 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-32510/ Thu, 23 Feb 2023 14:09:46 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-32510/ QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The post CVE-2021-32510 appeared first on CVE Vulnerability.

]]> QSAN Storage Manager through directory listing vulnerability in antivirus function allows remote authenticated attackers to list arbitrary directories by injecting file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The post CVE-2021-32510 appeared first on CVE Vulnerability.

]]> CVE-2021-32511 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-32511/ Thu, 23 Feb 2023 14:09:46 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-32511/ QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to list arbitrary directories via the file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The post CVE-2021-32511 appeared first on CVE Vulnerability.

]]> QSAN Storage Manager through directory listing vulnerability in ViewBroserList allows remote authenticated attackers to list arbitrary directories via the file path parameter. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The post CVE-2021-32511 appeared first on CVE Vulnerability.

]]> CVE-2021-32515 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-32515/ Thu, 23 Feb 2023 14:09:46 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-32515/ Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The post CVE-2021-32515 appeared first on CVE Vulnerability.

]]> Directory listing vulnerability in share_link in QSAN Storage Manager allows attackers to list arbitrary directories and further access credential information. The referred vulnerability has been solved with the updated version of QSAN Storage Manager v3.3.3.

The post CVE-2021-32515 appeared first on CVE Vulnerability.

]]> CVE-2021-27505 https://cvevulnerability.com/cve_vulnerabilities/cve-2021-27505/ Thu, 23 Feb 2023 14:08:35 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2021-27505/ mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.

The post CVE-2021-27505 appeared first on CVE Vulnerability.

]]> mySCADA myPRO versions prior to 8.20.0 does not restrict unauthorized read access to sensitive directory listing information.

The post CVE-2021-27505 appeared first on CVE Vulnerability.

]]> CVE-2022-24396 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-24396/ Thu, 23 Feb 2023 05:17:24 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-24396/ The Simple Diagnostics Agent – versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities and read, modify, or delete sensitive information and configurations.

The post CVE-2022-24396 appeared first on CVE Vulnerability.

]]> The Simple Diagnostics Agent – versions 1.0 up to version 1.57, does not perform any authentication checks for functionalities that can be accessed via localhost on http port 3005. Due to lack of authentication checks, an attacker could access administrative or other privileged functionalities and read, modify, or delete sensitive information and configurations.

The post CVE-2022-24396 appeared first on CVE Vulnerability.

]]>