vmware view 6.1 teradici pcoip firmware 4.6.1

Neo4j APOC (Awesome Procedures on Cypher) before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via. Hitachi Kokusai Electric Inc ISnex HC-IP9100HD Version 1.07 and below allows attackers to perform a directory traversal via a crafted GET request to the endpoint /ptippage.cgi. The binary will use `opendir()` as root directly without checking the path, letting the attacker provide an arbitrary path. An attacker can abuse this vulnerability to know if a directory exists or not anywhere in the fs. In Amanda 3.5.1, an information leak vulnerability was found in the calcsize SUID binary. In Apache Airflow prior to 2.3.4, an insecure umask was configured for numerous Airflow components when running with the `-daemon` flag which could result in a race condition giving world-writable files in the Airflow home directory and allowing local users to expose arbitrary file contents via the webserver. Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib.

Zaver through allows directory traversal via the GET /. There are no known workarounds for this issue. This issue has been resolved in version 7.3.0 and users are advised to upgrade. Since project IDs are incremental, an attacker could iterate through them and leak all project data. This file disclosure vulnerability can be used by unauthenticated attackers to leak all project files of any project. This directory contains all projects, including their bare git repos and build artifacts. All files in the /opt/onedev/sites/ directory are exposed and can be read by unauthenticated users. Onedev is an open source, self-hosted Git Server with CI/CD and Kanban. Improper validation of integrity check vulnerability in Smart Switch PC prior to version 3 allows local attackers to delete arbitrary directory using directory junction.

Improper validation of integrity check vulnerability in Samsung Kies prior to version 2.4 allows local attackers to delete arbitrary directory using directory junction.

directory traversal to read arbitrary files, as exploited in the wild in June 2022. Upgrade and manage your existing PCoIP Remote Workstation Cards or buy more from our OEM partners to harness the power of high-end towers, blade servers, or rack workstations and connect users anywhere to their graphics intensive applications, designs, and images.UniSharp laravel-filemanager (aka Laravel Filemanager) through 2.5.1 allows download?working_dir=%2F.

Vmware view 6.1 teradici pcoip firmware 4.6.1